Could not find a certificate that can be used for the Extensible Authentication Protocol

Dominic Nancy 6 Reputation points
2021-10-10T03:26:00.933+00:00

Hello everyone, I configured certificate verification in Azure, and then imported the certificate into the computer account and personal account, but when I use the VPN link, it seems that I can't find a certificate that can be used for an extensible authentication protocol.139181-image.png

Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,280 questions
{count} votes

1 answer

Sort by: Most helpful
  1. GitaraniSharma-MSFT 49,356 Reputation points Microsoft Employee
    2021-10-11T05:29:24.157+00:00

    Hello @Dominic Nancy ,

    Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

    If you have already followed this troubleshooting doc and it is still not working, you may have to create a new certificate and it should work.
    Before you go ahead and create a new certificate, make sure to delete the existing network connections on your client machine by browsing to:
    C:\Users<UserName>\AppData\Roaming\Microsoft\Network\Connections\Cm<GUID>
    Delete the existing GUID folders.

    Then follow the below docs to generate & install a new certificate to your client machine, add the root certificate data to your Azure VPN gateway and then download the fresh VPN client from Azure portal (VPN gateway) & install it:
    https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site
    https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-how-to-vpn-client-install-azure-cert
    https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-configuration-azure-cert

    Note: When you import the client certificate, do not select the Enable strong private key protection option.

    If you still face the same issue, we may need to investigate further offline.

    Kindly let us know if the above helps or you need further assistance on this issue.

    ----------------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.