Specifications

to connect to Windows 2000. The ServicePack2 is available from http:
//www.microsoft.com/windows2000/downloads/servicepacks/sp2/
sp2lang.asp.
For Windows 2000, you also need ipsecpol.exe. Find it in the Resource Kit
or at http://agent.microsoft.com/windows2000/techinfo/reskit/
tools/existing/ipsecpol-o.asp.
Note
Normally, this program is installed to C:/ProgramFiles/
ResourceKit. However, since this is a command-line program,
copy it to a directory that contains executable files. We recommend
copying ipsecpol.exe to C:/WINNT and the respective DLLs to
C:/WINNT/System.
Note
Configuring the Required Snap-Ins
Open the MMC by selecting ‘Start’ ➝ ‘Run’ and entering mmc. In the MMC,
click ‘File’ ➝ ‘Add/Remove Snap-in’. A window displaying active snap-ins
opens.
Click ‘Add’. A selection window displaying all available snap-ins opens. Se-
lect ‘Certificates’ ➝ ‘Add’ to start the certificate wizard.
Select ‘Computer account’. Click ‘Next’. Then select ‘Local computer’ and
click ‘Finish’.
Now select the snap-in ‘IP Security Policy Management’ and click ‘Add’. In
the certificate wizard, select ‘Local computer’ then click ‘Finish’. Click ‘Close’
then ‘OK’.
Importing the Client Certificate
In the MMC, you will see the two snap-ins that were added. Open the file
‘Certificates’ by clicking it. Right-click ‘Personal Certificates’. In the drop-
down menu, select ‘All tasks’ ➝ ‘Import’. This opens the certificate assistant.
Click ‘Next’ then ‘Browse’. Under ‘File Format’, select ‘Personal Information
Exchange (*.pfx,*.p12)’. Insert the floppy disk containing the exported certifi-
cates. Select the floppy drive as source. Select remCert. Click ‘Next’.
Now enter the password used in FAS to export the certificates. Click ‘Next’.
Select the certificate store ‘Personal Certificates’. Click ‘Next’ then ‘Finish’.
If the import process was successful, this will be confirmed in a box. Click
‘OK’.
132 Importing the Certificates in Windows