Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Following these instructions I was able to successfully create and connect to a Windows Azure VPN.

However, it appears that there are no ACLs on the VPN and all security is controlled via certificates. How do we handle the scenario where we need to "revoke" a client certificate (ie., a developer who has a cert leaves the company) ?

Is it possible to revoke a certificate with Azure VPN and Point-To-Site? If not, how do I secure a Point-To-Site VPN?

share|improve this question

The security is based on potentially a sets of certificates (typically self-signed) - each set has a 'root certificate' which is deployed to Azure and client certificates that are linked to it. If you remove a particular 'root certificate' from the network configuration on Azure you remove access to all client certificates that are linked to it.

Unfortunately you cannot control a specific client (not without create a set for each client, which, in most cases, is unsustainable) and so if you do need to remove a specific client you are likely to have to create a new set, excluding the client you wish to remove and re-distribute the set to all other clients.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.