Forum Discussion

soymanue's avatar
soymanue
Icon for Nimbostratus rankNimbostratus
Oct 28, 2014

Windows Phone 8.1 Edge Client Certificate Authentication

I want to configure Edge Client for Windows Phone 8.1 to authenticate using a Client Certificate. I've asked Microsoft and this is their answer: "3rd party VPN clients are able to support certificate based authentication. It is NOT selected using the UI on the VPN client setup. That is reserved only for our Inbox protocols (IKEv2 / L2TP, etc.). Cert auth for 3rd party VPN clients is provisioned using configuration on the 3rd party VPN gateway where the handshake between their app and their VPN server identifies what type of auth should be used, and then the appropriate UI workflow will get triggered when device is trying to connect. "

 

I've found documents that show how to do it with Juniper and CheckPoint, but nothing regarding F5. Is it possible? How should be configured Access Profile ? The certificate authentication is defined in the Virtuar server or in the Access Policy?

 

APM
certificate
deployment
microsoft
security

5 Replies

Sort By
  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Historic F5 Account
    Oct 28, 2014

    The Inbox VPN client does not work with Machine Certificates (F5 ID 450285,473090 , MSFT ID 608460). The Inbox VPN client or Edge Client CAN work with certificates, but it requires some special provisioning by an MDM for Windows Phone 8.1 to place the correct certificate into the store and to provision the VPN client.

     

    See this doc for more information:

     

    https://support.f5.com/kb/en-us/products/big-ip_apm/releasenotes/related/config-note-f5-inbox-vpn-client-windows8.html

     

  • Corey_12957's avatar
    Corey_12957
    Historic F5 Account
    Nov 03, 2014

    You can configure Edge client on Windows phone to use certificate auth with an MDM solution. Here is some example XML:

    Item> ./Vendor/MSFT/VPN/F5vpn/ThirdParty/AppId F5Networks.vpn.client_btcnfmkykcjs2

    For having F5 VPN client identify the certificate, it needs to identify the issuer: 

    
  ./Vendor/MSFT/VPN/F5vpn/ThirdParty/CustomConfiguration
  
     
  
  Certificate_Authority
  • giuseppe_6029's avatar
    giuseppe_6029
    Icon for Nimbostratus rankNimbostratus
    Dec 17, 2014

    Could anyone show the full xml for pushing certificate from MDM to windows phone device?

     

  • soymanue's avatar
    soymanue
    Icon for Nimbostratus rankNimbostratus
    Dec 23, 2014

    I'm afraid that Edge Client for Windows Phone 8.1 doesn't support Certificate Authentication yet.

     

    I was told by support engineers that next version will support that functionality but didn't give any release date.