Configuring Server/client Certs for EAP-TLS PPTP (howto?)

[markm75]

I'm assuming this would make PPTP almost as secure as IPSEC?


I think I would just need a certificate on the Server installed via
the CA authority?


And a cert on the local client (I'm assuming this cant happen through
auto enrollement/requests unless the server runs enterprise 2003?)..
Hence what is the simplest way to give users a certificate to install
(into their Trusted Root authority section?)?


If I wanted users to be able to connect via their domain info, would I
have to create seperate certs for each user? Or would it be simpler
just to create a server based single cert and have one user
certificate?


At any rate.. I'm not sure how to go about creating either end.. I
assumed it was

http://localhost/certserv

on the CA server.. but this
brings up page cant be displayed..


Any tips on these would be great.