Configuring PIX FW to use PKI on Microsoft CA Server

[vincent-n]

I just wanted to know whethere ther's anyone out there who has successfully implemented private PKI IPSec on a PIX 515ER using Microsoft 2K Advance Server's CA Server. If so, can you please direct me to the relevant details of how to implement this? I'm most interested in implementing IPSec with PKI on remote dial-up users (via the Internet) using Cisco's VPN Clients and terminates on a PIX Firewall. Thanks in advance for your replies.

[sanjaykt · Accepted solution]

Hi

try following link

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_user_guide_chapter09186a00800898d9.html#1031583

installing MS CA server is very straight task..

a. install network / active directory/ DNS/ IIS services

b. then add CA service on server. ensure that u select enterprise CA option and not standalone.. ( I would also recommend to read some notes from MS web site).

c. once installation is complete type following url on web browser from a remote PC

http://certsrv/ ---- this url will allow u to request and view status of certificates...

I have used MS CA servers for PKI IPsec deployment and it work fine...

I hope this helps u

regards

with this