Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 0 down vote favorite

I have an odd request, our client wants the ability to use certificate-based authentication for Routing & Remote Access in server 2008 R2, however he wants to use both Certificates and Passwords. I have configured NPS, RRAS and a CA as per this tutorial, but I can't see any way to require both forms of authentication, it only seems to be either/or.

Can anyone shed some light on this? I know it's a fairly short post but there's not a lot configured so far, if anyone needs more detail please ask for it in a comment and I will fill in the blanks.

Update

OK, so now I have figured out how to create multiple authentication conditions required to connect, and now having just certificates does not authenticate, but I can't see any way to configure a VPN connection to use multiple authentication methods. There is an option to use a different username than specified on the certificate but this does not help.

share|improve this question
The title may be misleading. When an AD account is configured to require smart card for interactive logon, the password is no longer functional. So you may want to clarify your title. If it is just a certificate and the account is not configured to require smart cards, it should be ok. – Greg Askew Jul 30 '12 at 12:33

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.