I have an odd request, our client wants the ability to use certificate-based authentication for Routing & Remote Access in server 2008 R2, however he wants to use both Certificates and Passwords. I have configured NPS, RRAS and a CA as per this tutorial, but I can't see any way to require both forms of authentication, it only seems to be either/or.
Can anyone shed some light on this? I know it's a fairly short post but there's not a lot configured so far, if anyone needs more detail please ask for it in a comment and I will fill in the blanks.
OK, so now I have figured out how to create multiple authentication conditions required to connect, and now having just certificates does not authenticate, but I can't see any way to configure a VPN connection to use multiple authentication methods. There is an option to use a different username than specified on the certificate but this does not help.