With SSH, it is possible to log in to a server using a public/private key pair. Is it possible to do something like this with a Server 2008 VPN?
eg, using a CA on the VPN box, issue a certificate to a specific machine, set to expire after a while. User installs key on their computer, connects to VPN. instead of being prompted for a user name and password, they are automatically logged in to a specific (unprivileged) account. After the certificate expires, they are presented with an error on login
Is this possible?