Specifications

5
IPsec Client on Windows XP and Windows 2000
IPsec Client on Win-
dows XP and Windows 2000
You can configure the connection manually with the program ipseccmd.exe
(Windows XP) or ipsecpol.exe (Windows 2000), which should be included in
your Windows installation. This is a command-line utility, so is very difficult
to use. You can also configure the connection with MMC (Microsoft Manage-
ment Console). However, it is recommended to use ipsec.exe for the config-
uration of the IPsec connection in Windows XP or Windows 2000, since this
tool handles the main bulk of the work. This tool can be downloaded from
http://vpn.ebootis.de/package.zip.
Exporting the Required Certificates
To export the needed certificates, proceed as described here. Open the IPsec
module in FAS. Click ‘Next’ to display your configured VPN connections.
Right-click the connection for which to export the certificates. From the drop-
down menu, select ‘Export certificates’.
Set an appropriate password and remember it. It will be needed when im-
porting the certificates. Save the certificates on an MS-DOS–formatted floppy
disk.
Importing the Certificates in Windows
If you use Windows 2000, first install ServicePack2, which enables Win-
dows 2000 to handle “3DES encryption”. Otherwise, you will not be able