IPSEC and Windows CA

[Aggy]

I want to secure telnet access between Windows PC’s and HPUX Server using Windows certificate server ( CA)
So far I have managed to secure FTP and TELNET access using pre-defined keys on my test environment, Do not have much idea of Windows certificate Server. How Windows CA work within theWINTEL/UNIX Environment Can someone help ?

Steps so far for pre-defined keys which works

ON HP-UX 11.23 Itanium Server

BATCH FILE
# SECTION 1: Host Policy

add host inbound_ftp_dev1test \
-source 10.1.6.12/19/FTP-CONTROL -destination 10.4.6.44/23 \
-action ESP_3DES_HMAC_SHA1

# SECTION 2: IKE Policy
add ike dev1test1 -remote 10.4.6.44 \
-authentication PSK -hash SHA1 -encryption 3DES

# SECTION 3: Authentication Record with Preshared Key
add auth dev1test1 -remote 10.4.6.44 \
-psk dev1_ask_key1


root> ipsec_config batch host_fiscdev1_working

Verified the contents of the config database

root> ipsec_config show all

root> ipsec_admin –start

On Windows PC
MMC and then Added IPSecurity policy using the Same Predefined key and encryption level as defined in the UX batch file and then assign the policy on my PC - ALL works OK.

But want to use Certificae Authority(Windows 2003 Certification Server ) instead of pre-defined keys but do not have much idea.

[Carol Wu]

There are two related white papers published in April 2007:

Configuring Microsoft Windows IP Security to Operate with HP-UX IPSec

Using HP-UX IPSec with Microsoft Windows Certificate