Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Following these instructions I was able to successfully create and connect to a Windows Azure VPN.

However, it appears that there are no ACLs on the VPN and all security is controlled via certificates. How do we handle the scenario where we need to "revoke" a client certificate (ie., a developer who has a cert leaves the company) ?

Is it possible to revoke a certificate with Azure VPN and Point-To-Site? If not, how do I secure a Point-To-Site VPN?

share|improve this question
add comment

1 Answer

The security is based on potentially a sets of certificates (typically self-signed) - each set has a 'root certificate' which is deployed to Azure and client certificates that are linked to it. If you remove a particular 'root certificate' from the network configuration on Azure you remove access to all client certificates that are linked to it.

Unfortunately you cannot control a specific client (not without create a set for each client, which, in most cases, is unsustainable) and so if you do need to remove a specific client you are likely to have to create a new set, excluding the client you wish to remove and re-distribute the set to all other clients.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.