Tryign to configure SSTP role on server but client won't connect with error 0x800B010F

have client single server (ad, dhcp, etc) sitting behind simple ant firewall.  followed sstp configuration guide , followed kb on ca setup stage:

windows vpn (sstp):

read first:

http://support.microsoft.com/kb/961880

setup guide:

http://technet.microsoft.com/en-us/library/cc731352%28ws.10%29.aspx

everything appears correct, except unable connect windows 7 station (only station have test with).

the client returns error 0x800b010f: certificate's cn name not match passed value.

i made sure install server ca cert in client's trusted ca store per guide , in frustration added in vpn certifcate (the 1 public domain name) clients private cert store well.  debugging logs did not help, nore have windows event logs (which restate same error).  i've gone far can skills , use assistance now.  verified rras service using cert public domain name (example: vpn1.public.com).  firewall forwards ports 80 , 443 server (all should required right?) , usual vpn passthrough checkboxes have been enabled.  firewall linksys e3000 (not should matter).

i followed guide close single server scenario (and watched 30 minute video same) , cannot figure out missing.  or suggestions appreciated.

hi,

thank post.

have client single server (ad, dhcp, etc) sitting behind simple ant firewall.
1. if mean server installed ad/dns , rras role, it's not recommended. sstp step-by-step guide requires 2 server dc1 , vpn1.
 
the firewall forwards ports 80 , 443 server (all should required right?) , usual vpn passthrough checkboxes have been enabled.
2. yes, require tcp port 443. configure sstp behind nat firewall, please refer kb947032.
http://support.microsoft.com/kb/947032

the client returns error 0x800b010f: certificate's cn name not match passed value.
3. please check vpn server certificate must have fqdn(vpn1.public.com) in subject name. client should use subject name(vpn1.public.com) connect sstp vpn.
http://support.microsoft.com/kb/947031
http://blogs.technet.com/b/rrasblog/archive/2009/08/12/troubleshooting-common-vpn-related-errors.aspx

if want change sstp binding certificate without run rras, please read article below:
http://support.microsoft.com/default.aspx?scid=kb;en-us;947027
http://blogs.technet.com/b/rrasblog/archive/2007/11/08/do-you-want-to-change-the-certificate-used-by-the-sstp-server-read-how.aspx

if there more inquiries on issue, please feel free let know.
 
regards,
rick tan
technet subscriber support
if technet subscription user , have feedback on our support quality, please send feedbackhere.

---

rick tan

technet community support

Windows Server  >  Platform Networking