L2TP certificate for VPN connection

[Peter Herijgers]

Hi All,

I have a computer (PC1) which is connected to a Server 2003 standard computer.
Now I want to make a VPN connection between a client (somewhere on the
internet) and PC1 not to the Server2003.
If I use PPTP everything is working fine. But for more security I want to
use L2TP/IPSec.

If I want to make a connection with a client computer to the PC1 I am
getting a message that I need a certificate.
Both computers, client and server (in this case by server I mean PC1) have
certificates from the server2003. That is Root certificates and user
certificates.

I think I need an IPsec certificate for the client computer to establish a
connection to PC1.

Is it possible that the Server2003 can generate such certificate?
According to the TechNet website only the Enterprice version of Server2003
can generate such certificate.

If I use the Certificate Authority on the Server2003 right clik on
Certificate Templates and select Manage I notice I have a template for both
IPSec and IPSec (Offline request).
I can duplicate them but I cannot install them into Certificate Templates
for my Root CA.

If I go to http://myserver/certsrv and Request a Certificate, click on
advanced certificate request, Create and submit a request to this CA I can
only select a Basic EFS or User certificate Template.

Any Ideas how to create a L2TP/IPSec certificate for a VPN connection for
WinXP Pro?

Thanks in advance.