On security and a disclaimer

I am not a security expert. However the method described in this article is they way it should be:

• Two-factor authentication: something the user has (the installed certificate) and something the user knows (AD user account name and password);
• The connection is encrypted and nothing crosses the Internet in plain text.

If a laptop gets stolen, no one can dial into the corporate network if they don’t know a username and password. If someone guesses a password, they will also need the certificate to dial in.

I can not guarantee that no bad things happen because of following this recipe. Please consult other sources, use common sense and try breaking into the system to check if it’s safe.