Cisco QuickVPN Client Error: Server's certificate doesn't exist on your local computer. Do you want to quit this connection?

If the above error happens run the following command from an elevated command prompt:

1. Navigate to: C:\Program Files (x86)\Cisco Small Business\QuickVPN Client>
2. openssl.exe s_client -showcerts -connect 99.99.99.99:443 >c:\temp\cert.pem
   • Where 99.99.99.99 is your WAN IP.
   • Make sure that there is a Temp folder under C:\
3. Copy the cert.pem file from C:\Temp to the QuickVPN Client folder.
4. Click Yes and through the UAC prompts if required.
5. Close and re-open the QuickVPN Client
6. Connect.

Original instructions here with a slight modification by us for Vista/Windows 7/8:

• Cisco Home Community: Server's certificate doesn't exist on your local computer. Do you want to quit this connection​?

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*Our original iMac was stolen (previous blog post). We now have a new MacBook Pro courtesy of Vlad Mazek, owner of OWN.

Windows Live Writer

 Subscribe in a reader

Moving From 3G CDMA to 3G+ HSPA In Canada

We just picked up a Sierra Wireless 306 USB HSPA (SW 306) 3G+ cellular modem that runs on the CDMA carrier’s networks here in Canada.

Now, with the Sierra Wireless 598 3G modem, there was no real worry about hitting the 1GB data plan’s soft limit as the modem rarely gave us over 20KB/sec despite the 3Mb connection claim it made when it connected to the Internet.

This is definitely _not_ the case when it comes to the SW 306. While no speed claims are made when the connection to the Internet completes, we have already seen the need to do some downloading of drivers and other software packages using the new modem.

Thus, we have a very practical view of just how fast this thing is . . . and it is _really_ fast!

One Microsoft download came down at close to 1MB/Sec.

This morning, as a test, we downloaded IE8 for Windows XP:

In the above screenshot the SW 306 3G+ cellular modem is on par with our close to the Central Office ADSL 6Mb connection that runs closer to 7.5Mb.

So, what does that mean for us? It means that we need to be aware of our RDP settings when connecting to remote systems for the day. 32bit colour depth is not necessary, nor is full screen on a larger high definition laptop screen.

We will need to keep an eye on our usage via our provider’s online portal that allows us to do so.

It also means that our Canadian cellular data providers will be needing to restructure their data plans that span 500MB to 5GB per month. Obviously, even the 5GB soft limit will not be enough for bandwidth intensive users.

Though, with little competition between the providers up here, there is really not a lot of incentive to do that.

We have clients that have one of the provider’s early unlimited data plans. The provider has a policy of taking away great plans and replacing them with whatever is current, and more restrictive, than the previous plan. So, we are going to encourage our clients to hold onto that plan and their current SW 598 modems as long as possible.

And one more thing. We are required to pay an extra $5/Mth per device that requires any form of PPTP/L2TP VPN access. VPN connections are not allowed out of the box.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*All Mac on SBS posts will not be written on a Mac until we replace our now missing iMac! (previous blog post)

Windows Live Writer

SBS 2008 and Disabling IPv6 – Unintended Consequences Like RRAS VPN Wizard Error

While IPv6 may not appear to be critical to the server/client communications relationship, SBS 2008 does require IPv6 for some of the server based components to work correctly.

• Official SBS Blog: Issues After Disabling IPv6 on Your NIC on SBS 2008

One of those unintended consequences may be the inability to configure the PPTP VPN setup in SBS after disabling IPv6 on the server.

The error will state that RRAS is not ready to be configured.

The above blog link contains the proper methodology for disabling IPv6 and part of that process is how to allow PPTP to be configured by the wizard.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*All Mac on SBS posts will not be written on a Mac until we replace our now missing iMac! (previous blog post)

Windows Live Writer

Some Thoughts on SBS 2008 and Branch Offices

When looking to deploy SBS 2008 into a situation where SBS will reside in the main office and there will be a branch office or offices.

If there are only a few seats at the branch offices, then a simple solution is the have SBS 2008 Premium at the main office with either a Terminal Server serving remote desktops or a Hyper-V box serving desktop OS based virtual machines.

The catch would be the requirements of the Line of Business (LoB) applications that are needed.

Using the Remote Web Workplace in this manner, we can eliminate the need for a server at the branch office.

If the Line of Business applications allow for Terminal Services installation, then another option would be to publish the LoB via Terminal Services RemoteApps. The user can get to the Lob app via RWW or via an icon on their desktop.

In either case, Scorpion Software’s AuthAnvil should be seriously considered to protect those TS Gateway sessions with another layer of security. The expense is relatively minor compared to the peace of mind we would have knowing that our client’s TS Gateway is protected.

For larger installations where there are a number of users at the branch office or offices, then a hardware based VPN setup would be a consideration. Keep in mind that bandwidth considerations and ISP stability are important when looking to a VPN as part of the overall solution.

A Read-Only Domain Controller on Server Core along with the needed Roles could provide local users with authentication, file, print, and centralized backup services. Server Core provides the opportunity to really slim down the needed hardware, or even repurpose existing server hardware for the branch office.

Install the full Server 2008 install, then WSUS can be installed on the branch office server and Group Policy can be customized to facilitate the local clients getting their updates from the local WSUS. This setup can be tweaked for more than one branch office with a server in each too.

Ultimately, our solution direction would depend on the client’s industry their LoB needs, compliance, retention, and remote access needs. It is our preference to have remote users connect via RWW and work with all data stored on the main office’s network.

This preference is due to the reduction in complexity that happens as a result of keeping everything relatively centralized. KISS (Wikipedia) is the operating principle behind our preference.

However, ultimately the solution we tailor will be with the client’s best interests in mind.

We will run through some actual configurations in our upcoming SBS 2008 Advanced Blueprint book too.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*All Mac on SBS posts will not be written on a Mac until we replace our now missing iMac! (previous blog post)

Windows Live Writer

Mac on SBS - Creating a VPN connection to SBS

It is unfortunate that we are not able to get connected a Terminal Services session via the Remote Web Workplace on our iMac.

It would not be feasible to have 10 Macs connected via RRAS on any given day. This would be a bandwidth killer.

But, on occasion, a connection to the server for management may be needed, or a user may need access to their XP Pro/Vista Business box at work and they have a Mac at home.

To get around this, we need to create a PPTP VPN connection to the server.

To do this:

1. Open Finder.
2. Click on Applications.
3. Double click on Internet Connect.asp.
4. You will be presented with the following window:
• 
  
  
5. Click on the VPN Lock.
6. "Your computer needs to be set up to make VPN connections." Click on PPTP.
7. Authenticate by inputting your Mac access password if requested.
8. Set the server address: mysbsserver.mydomain.com
9. Put your SBS login name in "Account Name".
10. Enter your login password.
11. Click on the Connect button.
12. Start the Remote Desktop Client and connect using the FQDN (Fully Qualified Domain Name: mysbsbox.myinternallan.lan).

This is a quick, in-a-pinch, kind of solution.

One would think that it would be possible to connect to a shared company folder as well. But, so far we are not able to connect to the remote SBS box over the VPN. This is by either clicking on the Network icon in Finder, or typing the FQDN of the SBS server in the Search.

A little bit more research is in order because Apple's Web site indicates that it should be possible: Windows: Join the Network.

Ah, here we go: Subject: Viewing Shares via VPN PPTP Mac OSX to SBS 2000.

We need to click Go and Connect to Server in finder and enter: smb://netbiosnameofmyserver/. We also need to make sure to have followed the connect a Mac to SBS instructions about disabling SMB signing on the SBS box! And, there we go! :D

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.