Use both Client Certificate and Password

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
rkheria
Posts: 2
Joined: Wed Apr 11, 2018 1:18 pm

Use both Client Certificate and Password

Post by rkheria » Wed Apr 11, 2018 1:31 pm

I want to setup VPN server such that
1. Users can connect to VPN using only specific laptop, and not their own devices. (I think certificates will get that)
2. If the laptop is stolen or someone else gets access to it, VPN that person cannot connect to VPN. (I think password will get that)

Please tell me if I have thinking in the wrong way.

I was thinking that I can achieve that by installing Client certificates only on those laptops and the users would have to supply a password also. That ways users will not be able to connect to VPN from their own computers as that will not have the certificate.

How can I setup VPN with those requirements.

Thank you

thisjun
Posts: 2247
Joined: Mon Feb 24, 2014 11:03 am

Re: Use both Client Certificate and Password

Post by thisjun » Fri Apr 27, 2018 3:36 am

I think certificates can be copied to another computer.
So, certificates can't satisfy first condition.

For second condition, please use password auth with following way.
http://www.softether.org/4-docs/1-manua ... tion_Fails

Post Reply