You have a computer that runs Windows 7.
Your network has a SSTP VPN server that uses a self-signed certificate.
When you connect to the VPN server, you receive the following error message: "Your computer does not trust the issuing certification authority (CA) of the SSTP VPN servers certificate".
You need to prevent the error message from appearing when you connect to the VPN server.
What should you do?
A. From the properties of the VPN connection, modify the dialing options.
B. From the properties of the VPN connection, modify the data encryption settings.
C. From Certificate Manager, import the servers certificate into the Personal store.
D. From Certificate Manager, import the server’s certificate into the Trusted Root Certification Authorities store.
Correct Answer: D
Explanation/Reference:
Explanation:
Certificate Manager
A certificate manager can approve certificate enrollment and revocation requests, issue certificates, and manage certificates. This role can be configured by assigning a user or group the Issue and Manage Certificatespermission. When you assign this permission to a user or group, you can further refine their ability to manage certificates by group and by certificate template. For example, you might want to implement a restriction that they can only approve requests or revoke smart card logon certificates for users in a certain office or organizational unit that is the basis for a security group.
Importing Certificates
You may restore certificates and the corresponding private keys from a file.
4. Right-click the certificate store you want to import, and click Install PFX on the context menu.
5. The Certificate Import Wizard launches. Click Next.
6. In the File name text box, type the name of the certificate file that you want to import. Alternatively, you can find the file by clicking Browse.
7. Click Next. If the file specified is a Personal Information ExchangePKCS #12 (*.pfx), you will be prompted for the password. Enter the password to import the file. Click Next.
8. On the next page, select where you’d like to store the certificate. Click Next.
9. The next wizard page contains summary information about the file that you are importing. Click Finish to import the file. The certificate(s) are now ready for use by the system.
