Can´t choose certificate when defining VPN connection

Client is Macbook Pro running SL 10.6.4
VPN gateway is Cisco
Users are authenticated using username, password and a digital certificate. The certificate, both root and user, is created on a Windows server (using Microsoft Certificate Services). Root and user certificate is imported into the keychain on the Macbook. But when I try to select, in System Preferences, I am not able to choose my own user certificate. It looks like it only support Machine Authentication (and needs a Machine Certificate ??).
Has anybody ever created a VPN setup on a Mac, towards a Cisco VPN gateway, using username+password and certificate ? Where must I store the certificate to make OSX us it when defining a Cisco VPN connection ?

Same thing here. This seems like a huge-gaping-hole type bug but I can't find anything about it doing any kind of searching
I've managed to get the machine certificate to "stick" by the following:
1. Select Shared Secret and enter some random text.
2. Click OK and click Apply.
3. Now go to the auth settings again and set the machine cert.
4. Click OK and Apply.
Setting should stick now.
No luck with the User certificate though
I've been able to track down the preference change to this file:
/Library/Preferences/SystemConfiguration/preferences.plist
In this file, supposing you use password authentication, there are entries as such:
<key>AuthPassword</key>
<string>6247164D-49F3-49A2-A933-0D95B5400A33</string>
<key>AuthPasswordEncryption</key>
<string>Keychain</string>
Now if you use a certificate, there is only the following:
<key>AuthProtocol</key>
<array>
<string>EAP</string>
</array>
As you can see from here, nothing gets saved about the user certificate... grr!
Is there anyone who successfully used the OS X VPN this way?
Thanks

Similar Messages

I do not see where to enter IP addresses in the Open VPN setup. Also, how can I set it up so that I can choose different servers in the same way as I can currently choose them with my VPN app but for PPTP?

I think I have it working on my iPhone 5. But, I do not see how I can control the exit point that I would like for the VPN. Are all the exit points shown in the VPN setting now going to work with Open VPN, or do they remain PPTP? If I am reading correctly, they look like they remain PPTP. If I cannot control the exit point for open VPN, which exit point is the default in the profile you provided me?I note that Open VPN Connect does not work with any of the new 64 bit devices like the iPhone 5S, the iPad Air, and the new iPad MIni. Is there any chance that you guys will come up with an update for your app so that open VPN can be made to work on all iOS devices? That would be nice, particularly if the Open VPN Connect app does not give me a choice of exit points.Thanks,
I do not see where to enter IP addresses in the Open VPN setup. Also, how can I set it up so that I can choose different servers in the same way as I can currently choose them with my VPN app but for PPTP?
Just a quick note to tell you that Open VPN has updated their app so that it is compatible with 64 bit ARM devices like the iPhone 5S, the iPad Air, and the iPad Mini Retina.That does not resolve the problem of how to easily choose among the various possibilities for the exit server. We need to find an easy way to choose.

Thank you for trying the new Firefox. I'm sorry that you’re unhappy with the new design.
I understand your frustration and surprise at the removal of these features but I can't undo these changes. I'm just a support volunteer and I do not work for Mozilla. But you can send any feedback about these changes to http://input.mozilla.org/feedback. Firefox developers collect data submitted through there then present it at the weekly Firefox meeting
I recommend you try to adjust to 29 and see if you can't make it work for you before you downgrade to a less secure and soon outdated version of Firefox.
Here are a few suggestions for restoring the old design. I hope you’ll find one that works for you:
*Use the [https://addons.mozilla.org/en-US/firefox/addon/classicthemerestorer/ Classic Theme Restorer] to bring back the old design. Learn more here: [[How to make the new Firefox look like the old Firefox]]
*Use the [https://addons.mozilla.org/en-US/firefox/addon/the-addon-bar/ Add-on Bar Restored] to bring back the add-on bar. Learn more here: [[What happened to the Add-on Bar?]]

HT1491 Hi, i have recently brought some tv shows on my ipod touch. I can only watch them when i'm connected to the internet.............why? Also is it possible to move them to my music folder? Thanks

Hi, I have recently brought some tv programmes from itunes on my ipod touch. I can only watch them when i'm connected to the internet though. Any way i can move them to my music folder too? Thanks

That means it is not fully downloaded so you are streaming it. Fully download it.

How can i access web when i am connected through a proxy?

HI,
I am rakesh from bangalore. I want to know how can i access web when i am connected to internet throug a proxy. are there any classes to handle this in java.net package?
Thanking you
Rakesh

the URL class can also handle a proxyserver.
URL urlobj = new URL("http", proxyhost, proxyport, url);

Can anyone suggest a free fast VPN connection

Can anyone suggest a free fast VPN connection.
i want to access streaming video (ie hulu.com)that is blocked in canada. Hotspot Shield works but is way too slow and I get stuttering and frozen video.
Any suggestions would be appreciated
Thanks in advance
Dave

Fast and free? I'm surprised you can even find slow and free. I use StrongVPN. It is fast, but it isn't free at $15/month.

Error when defining Solman connection

Dear Gurus.
When defining connection to Solman, the following error message appears:
The full log attached.
Please advice!
Regards
Vladimir

Hi Vladimir,
Yes, I failed to get that to work as well (I contacted Support, it is a known issue). Please see this document for setting up the Solution Manager connection: http://support.sap.com/content/dam/library/support/support-programs-services/Solution%20Manager/Business%20Process%20Ope…
You can also read SAP note 1265635, I like the previously mentioned PDF because it has screen captures.
As a further read, once all is set up, I recommend what Martin Lauer wrote up in a nice blog entry on the subject Solution Manager: Monitoring SAP CPS by Redwood jobs with SAP Solution Manager.
Regards,
HP

Error 720 when establishing VPN connection to RRAS server in Windows 8.1

Hi,
I am unable to establish a VPN connection to my Windows Server 2008 R2 RRAS server. I have tried all protocols, but always getting the same error: "Error 720: A connection to the remote computer could not be established. You might need to change
the network settings for this connection".
I am able to connect using another Windows 7 computer, on the same network and with exactly the same VPN parameters. So this is clearly not a problem with RRAS, the remote router or firewall and/or the local router.
Strangely, the connection works by unchecking IPv4 and checking IPv6 in the connection properties. But I need IPv4 to work. All IPv4 settings are blank, nothing statically configured here.
Note: This is a clean install of Windows 8.1, not an upgrade from a previous version.
Thank you for helping me out!

Hi,
This behavior can occur if your computer and the RAS server don't have a protocol in common, or if RAS is not configured correctly. The error code 720 indicates no PPP control protocols configured.
Assuming the RRAS is using, we need to make the Windows client is running PPTP too. To do this follow these steps:
1. Right click VPN connection, and then click Properties.
2. In the VPN Connection Properties dialog box, click the Networking tab, and make sure you have a protocol that the RAS server runing.
If you don't have a protocol that the RAS server is running, add the needed protocol:
1. Click install, click Protocol, and then click Add;
2. Click the protocol that you need to install, and then click OK.
3. Click Close in the VPN Connection Properties dialog box.
Karen Hu
TechNet Community Support

Can not delete music when iphone 4s connected to itunes.....

i am not able to delete music when iphone is connected to itunes....by going to music and by selecting my desired song which i want to delete am not able to delete song....
i have tries following things....
when i click right there is no option to delete a song.....i found just 3 options....1st is play song....2nd is Get info and 3rd is Show in itunes store..... but i found delete option no where......
i also try to delete the song by pressing delete from key board but it does nothing.....
i also try to delete song by going to edit but dele option is not highlighted......the options which are high lightes are.....select all....select none....show preferences......
this is the scenarios that i am facing.......

Have you tried?
Highlight and...
CTRL + D?
You can delete music from the actual iPhone by going to the song/album you wish to delete and swping to the right on it, a delete bar will appear and you will have the option to delete.

Can't find resource when establish iiop connection to 8i

Finally I finished the hellocorba project. When I try to deploy
to 8i, another problem (I had submitted to oracle support 3 days
ago, haven't got answer)still persist: I tried to establish iiop
connection to 8i, which reside in an solaris machine (while
jdeveloper in NT), jdeveloper give me the message: Can't find
resource. The Jdbc connection to 8i is OK. I can also run corba
application in Solaris. What could be wrong? Please help! Thank
you very much. Eric Liu
null

Hi
See if it helps by adding an entry of the solaris machine in the
local hosts file.
Also check an message posted with subject 'How to get IIOP to
work with port 2481' It has very useful info.
regards
raghu
Eric Liu (guest) wrote:
: Finally I finished the hellocorba project. When I try to deploy
: to 8i, another problem (I had submitted to oracle support 3
days
: ago, haven't got answer)still persist: I tried to establish
iiop
: connection to 8i, which reside in an solaris machine (while
: jdeveloper in NT), jdeveloper give me the message: Can't find
: resource. The Jdbc connection to 8i is OK. I can also run corba
: application in Solaris. What could be wrong? Please help! Thank
: you very much. Eric Liu
null

Can't choose certificate for computer identification in VPN settings

When I click on the "Choose" button in the dialog for computer identification in VPN settings, nothing happens. Is there any way to configure the certificate manually on the Terminal until this bug is fixed?

Same thing here. This seems like a huge-gaping-hole type bug but I can't find anything about it doing any kind of searching
I've managed to get the machine certificate to "stick" by the following:
1. Select Shared Secret and enter some random text.
2. Click OK and click Apply.
3. Now go to the auth settings again and set the machine cert.
4. Click OK and Apply.
Setting should stick now.
No luck with the User certificate though
I've been able to track down the preference change to this file:
/Library/Preferences/SystemConfiguration/preferences.plist
In this file, supposing you use password authentication, there are entries as such:
<key>AuthPassword</key>
<string>6247164D-49F3-49A2-A933-0D95B5400A33</string>
<key>AuthPasswordEncryption</key>
<string>Keychain</string>
Now if you use a certificate, there is only the following:
<key>AuthProtocol</key>
<array>
<string>EAP</string>
</array>
As you can see from here, nothing gets saved about the user certificate... grr!
Is there anyone who successfully used the OS X VPN this way?
Thanks

Can you create a Remote Access VPN connection to tunnel DMZ LAN and Inside Networks simultaneously?

I have a customer that has a ASA 5510 version 8.3 with IPSEC Client Access that includes some of their networks on the Inside interface. The issue they are having is when their mobile users connect with the vpn client (which is using split tunneling), they can no longer access their web server applications that are running in the DMZ. Without the client connected, they access the web servers via the external public IP. Once they are connected via vpn, their default dns server becomes the internal AD DNS server, which resolves the DNS of the web servers to the private DMZ ip address.
Can a Remote Access VPN client connection be allowed to connect to both the DMZ interface and the Inside Interface? I had always only setup RA VPN clients to connect to networks on the Inside Interface.
I tried adding the DMZ network to the Split Tunnel list, but I could not access anything it while connected to vpn using the private IP addresses.

Yes, you should be able to access DMZ subnets as well if they are added to the split tunnel ACL. You could check the NAT exemption configuration for the DMZ and also check if the ASA is forwarding the packet through DMZ interface by configuring captures on the DMZ interface.
Share the configuration if you want help with the NAT exemption part.

Can't access management interface via vpn connection

Hi all,
I can't seem to be able to manage my ASA 5510 when I connect via vpn. My asa sits at a remote colo, and from my office i can connect fine. I have it configured as management-access (dmz), bc as of now we are just doing some staging and all the servers are in the dmz interface.
When i connect with the vpn client, in the routes it sees 192.168.1.0 255.255.255.0 which is the management network/interface.
For some reason I can't get access to 192.168.1.1 to use the ASDM.
Here is how i did my vpn via CLI
isakmp enable outside
isakmp identity address
isakmp policy 10
authentication pre-share
encryption des
hash md5
group 2
lifetime 86400
ip local pool vpnpool 10.1.1.2-10.1.1.10
access-list split_tunnel standard permit 192.168.200.0 255.255.255.0
access-list split_tunnel standard permit 192.168.100.0 255.255.255.0
access-list split_tunnel standard permit 192.168.1.0 255.255.255.0
group-policy xxxxx internal
group-policy xxxxx attributes
dns value
split-tunnel-policy tunnelspecified
split-tunnel-network-list value split_tunnel
username xxxxx password
username xxxxxx attributes
vpn-group-policy xxxx
username xxxxxx password
username xxxxxx attributes
vpn-group-policy xxxx
username xxxx password
username xxxx attributes
vpn-group-policy xxxx
tunnel-group xxxx type ipsec-ra
tunnel-group xxxx general-attributes
address-pool vpnpool
tunnel-group xxxx ipsec-attributes
pre-shared-key
access-list vpnra permit ip 192.168.200.0 255.255.255.0 10.1.1.0 255.255.255.0
access-list vpnra permit ip 192.168.100.0 255.255.255.0 10.1.1.0 255.255.255.0
access-list vpnra permit ip 192.168.1.0 255.255.255.0 10.1.1.0 255.255.255.0
nat (inside) 0 access-list vpnra
nat (dmz) 0 access-list vpnra
nat (management) 0 access-list vprna
crypto ipsec transform-set md5des esp-des esp-md5-hmac
crypto dynamic-map dynomap 10 set transform-set md5des
crypto map vpnpeer 20 ipsec-isakmp dynamic dynomap
crypto map vpnpeer interface outside
Any help would be much appreciated

it seems like you are missing a line:
management-access "interface"
http://www.cisco.com/en/US/docs/security/asa/asa71/command/reference/m_711.html#wp1631964

I can't synchronised even when I am connected with my USB cable

I don't know what happened, I don't see my Ipad and Ipod on Itunes. I have connected with my PC and nothing. I uninstalled and reinstalled Itunes and still nothing. I am using a VPN address but I didn't activated to be sure that I can synchronised. I have Windows XP and I hope somebody can help me.
Thank you in advance.

Thank you for the information.
I tried everything and I don't see anything with Apple Mobile Device USB Driver.
I have followed everything and I opened all the files in the section "Apple mobile device USB driver is not listed" and I have no file with Apple.
Do you have other suggestion?

Can't choose Calendar when adding new events on iPhone

Hello,
I just got my wife her first iPHone. We've both got macs and have a family Mobile Me account. Her personal calendars and our shared family calendars show up on her iPhone, but when she tries to add an event on her iphone, there is no field to choose to which calendar you want to add the event. This is not a problem when adding events on her computer. As far as I can tell, her iPhone synced fine, though I'm not 100% sure.
Thanks in advance for the help!

figured it out. her iphone did not have mobile me properly configured. I needed to set that up with the correct Apple ID

Can I manage devices when sharing internet connection?

I'm sharing an internet connection over wifi on my rMBP and I'm wondering if there's a way I can see a list of the devices currently accessing it.

Hey Dino,
Try Forgetting the Wi-Fi network as described in this article. http://support.apple.com/kb/TS1398
If forgetting the Wi-Fi network does not resolve the issue, try Resetting Network Settings on the iPhone, go to Settings> General> Reset> Reset Network Settings.
If it still has an issue restore the iPhone: http://docs.info.apple.com/article.html?artnum=305744
Jason

Can´t choose certificate when defining VPN connection

Similar Messages

Maybe you are looking for