lsipsectool, was Re: [Openswan Users] Creating Win XP vpn connection

Paul Wouters paul at
Tue Apr 25 21:51:52 CEST 2006

On Tue, 25 Apr 2006, Marek Greko wrote:

> > Blame microsoft. Despite the above comment about profiles per user,
> > ipsec-usable certificates need administrative priviledges to be imported
> > into the registry. This is the same issue why you cannot double click it.
> Uuuuu.... and how can I get normal user running lsipsectool? Admiistrator
> already has imported the correct certificate... How can I make user to use
> it?

I think the user needs "Local Administrator" rights to both import and read
the certificate as a "Host Certificate" needed for IPsec. I have never tried
it as a user without Local Admin rights, since usually people have those
permissions on their own laptop.

Maybe Enrique can tell us more,

Building and integrating Virtual Private Networks with Openswan:

More information about the Users mailing list