Hello,
I've set up a Azure VPN with Point-To-Site capability. It works fine, but I need client certificates with an expiration date later than 3 years from now. We will install the client software on Embedded PCs that we can't maintain every 3 years.
I've created and uploaded a self signed root certificate for the azure network that expires 2099 but if I download the VPN client software from azure management page, I get a certificate that expires 2017.
Ok, so I created and installed client certificates from that root certificate with makecert. These certificates will expire 2044. If I set up a VPN Connection, that works fine with the certificate from the azure client software, but with my certificates I get the following error: 0x800B0109 "A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider."
My root certificate is installed under "Trusted Root Certification Authorities" as the certificate from the client software. If I change only the marked root certificate to that certificate from azure, everything works.
So, the certificate which expires in 3 years will work, but my root certificate next to it don't, why and how can I get a certificate for my clients that expires much later?
Please help me, thanks a lot.