Azure Point to Site VPN yapabilmek için öncelikle hazırlmamız gereken self sign sertifikalar için aşağıdaki powershell komutu kullanılabilir.

Root Sertifika için

$cert = New-SelfSignedCertificate -Type Custom -KeySpec Signature -Subject “CN=RootVolsys” -KeyExportPolicy Exportable -HashAlgorithm sha256 -KeyLength 2048 -CertStoreLocation “Cert:\CurrentUser\My” -KeyUsageProperty Sign -KeyUsage CertSign $certdata=cert.Export([System.Security.Cryptography.X509Certificates.X509ContentType]::Cert) $certstring = [Convert]::ToBase64String($certdata) $certstring | clip

Client Sertifika için

New-SelfSignedCertificate -Type Custom -KeySpec Signature -Subject “CN=ClientVolsys” -KeyExportPolicy Exportable -HashAlgorithm sha256 -KeyLength 2048 -CertStoreLocation “Cert:\CurrentUser\My” -Signer $cert -TextExtension @(“2.5.29.37={text}1.3.6.1.5.5.7.3.2”)

Sertifika	Konumu (Location)
Client.pfx	Current User\Personel\Certificates
Root.cer	Local Computer\Trusted Root Certification Authorities