Windows RT pulse user certificate

[Antoine_59_]

Hello,

With a Surface PRO Windows RT 8.1, is it possible to make an user certificate based authentication ?

Thanks,

Antoine

[Kita_]

Surface Pro should have the full version of Windows 8.1.  Surface should be Windows RT.  If we are talking about Windows RT, you will need to use the Windows-In Box solution since Windows RT does not allow you to install client application directly.  You can refer to the Windows In-box solution for all the possible solutions we provided, but you will need to run the following powershell command to change default username/password to certificate authentication.

http://www.juniper.net/techpubs/en_US/junos-pulse5.0/information-products/pathway-pages/junos-pulse-...

######

Add Pulse connection that saves the user credentials after the first login

The -RememberCredentials option applies to smart cards and certificate PINs, and to
usernames and passwords.

$xml = "<pulse-schema ></pulse-schema>"
$sourceXml=New-Object System.Xml.XmlDocument
$sourceXml.LoadXml($xml)
Add-VpnConnection -Name PulseCxn2Ó -ServerAddress 10.17.1.217Ó
-RememberCredential -PluginApplicationID
JuniperNetworks.JunosPulseVpn_cw5n1h2txyewyÓ -CustomConfiguration $sourceXml

[Antoine_59_]

Hello,

Yes, I misunderstood with RT and PRO. I'm clear about that now.

The question was about Windows RT.

Thank you for the reply.

Antoine

[filbert_]

Were you able to get user certificate authenticaion to work on RT? I see in the documentation that it states "Authentication method" is not a supported setting.   This makes me think that only UN/PW is supported.                                                                                                                                                      

NOTE:
Some VPN Client cmdlet options are not applicable to creating Pulse connections.The following Add-VpnConnection options cause an errorif you use them when creating a Pulse connection:                                                                            
¥ -AuthenticationMethod
¥ -EncryptionLevel
¥ -L2tpPsk
¥ -MachineCertificateEKUFilter
¥ -MachineCertificateIssuerFilter
¥ -UseWinlogonCredential

[Kita_]

Yes, I was able to get this working in our lab. Did you have a PFX or P12 file which you imported through MMC for the User Computer > Local Computer store?

[filbert_]

Yes the certificate is there. What are the powershell commands you used to configure the client?

Thanks

[Kita_]

$xml = "" $sourceXml=New-Object System.Xml.XmlDocument $sourceXml.LoadXml($xml) Add-VpnConnection -Name PulseCxn2Ó -ServerAddress 10.17.1.217Ó -RememberCredential -PluginApplicationID JuniperNetworks.JunosPulseVpn_cw5n1h2txyewyÓ -CustomConfiguration $sourceXml