A lock-operator shop has no Entra-joined laptops but can issue device certificates from its CA for VPN clients. Which point-to-site authentication method fits that shop?
Select an answer to reveal the explanation.
Short Explanation
No Entra-joined laptops? Hand them certs from the shop CA—or RADIUS if NPS is already humming. P2S can authenticate with certificates; Entra is the other lane for joined gear, not a client-secret paste job.
Full Explanation
Azure VPN Gateway point-to-site supports Microsoft Entra ID, Azure certificate authentication, and RADIUS. Shops that issue device certificates from an on-premises CA typically choose certificate authentication, or RADIUS when Network Policy Server is already in place. Entra ID auth is the alternative for Entra-joined clients, not the only option. App-registration client secrets are not the P2S credential model. RBAC Owner does not replace VPN authentication.