So let's move onto the next demonstration.
Let's create a test VPN connection.
So this is a Windows 10 test client that I have provisioned.
It is joined to my domain,
and it should've already picked up all of the certificates
because I've added it to the VPN device group and my user is
a member of the VPN users group.
So let's validate before we proceed any further that we
have all of our certificates in place.
And to do that,
I'm going to first open up the Local Computer Certificates
store and check on the device certificate,
and we'll do that by just launching certlm.msc.
And I'll expand the Certificates store and the Personal store,
and you should see a certificate from the VPN Devices certificate template,
and everything looks good.
So it's issued by my PKI, has a private key.
Everything looks fantastic.
So let's validate that our user certificate is also in place.
And for that,
I'm going to run sort of a similar command, and this one is,
instead of certlm, which is cert local machine,
this is cert manager, or certmgr.msc, and it's used for
finding user authentication certificates.
Once again, expand the Personal store, and indeed I have a user
authentication certificate issued to this particular user, so I
should have everything in place.
So I have both of my certificates,
my device certificate and my user certificate, so we can proceed with creating the test profile.