Azure VPN 找不到可以使用這個可延伸的驗證通訊協定的憑證 (錯誤 798)

2022-09-05

243
0
Azure

Azure VPN 憑證過期處理筆記

徵狀

問題

處置

其實就是要重新跑一次產憑證的流程

參照

產生及匯出 P2S 的憑證：PowerShell - Azure VPN Gateway | Microsoft Docs

$cert = New-SelfSignedCertificate -Type Custom -KeySpec Signature `
-Subject "CN=P2SRootCert" -KeyExportPolicy Exportable `
-HashAlgorithm sha256 -KeyLength 2048 `
-CertStoreLocation "Cert:\CurrentUser\My" -KeyUsageProperty Sign -KeyUsage CertSign

New-SelfSignedCertificate -Type Custom -DnsName P2SChildCert -KeySpec Signature `
-Subject "CN=P2SChildCert" -KeyExportPolicy Exportable `
-HashAlgorithm sha256 -KeyLength 2048 `
-CertStoreLocation "Cert:\CurrentUser\My" `
-Signer $cert -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.2")

匯出根憑證 (之後到 Azure VPN 上新增)