Forcepoint™ Security Management Center Service Online Documentation

Home
VPN
VPN authentication & certificates
A digital certificate is a proof of identity. SMCaaS supports using certificates for authenticating gateways and the Forcepoint VPN Client.

Preface
This guide provides the information you need to work with your Forcepoint product.
Introduction to SMC as a Service
The SMC as a Service provides centralized access for configuring, managing, logging, and monitoring NGFWs that secure network connectivity and control business operations.
Getting Started
Routing
Policy Creation and Administration
Monitoring
VPN
- VPN types & architecture
  A VPN extends a secured private network over public networks by encrypting connections so that they can be transported over insecure links without compromising confidential data.
- VPN configuration
- VPN authentication & certificates
  A digital certificate is a proof of identity. SMCaaS supports using certificates for authenticating gateways and the Forcepoint VPN Client.
  - Certificate-based authentication in VPNs
    In all site-to-site VPNs and in mobile VPNs with third-party VPN clients, you can use certificates for authentication.
  - VPN certificates and how they work
    Certificates can be used for authenticating VPN gateways and the Forcepoint VPN Client.
  - Pre-shared key (PSK) authentication in VPNs
    A pre-shared key is a string of characters that is used as an authentication key. You can use pre-shared keys for site-to-site VPN authentication and with third-party VPN clients.
  - Certificate authority (CA) trust configuration
    You can authenticate administrators using an X.509 certificate stored in the Windows certificate store, on a smart card like a Common Access Card (CAC), or via SMC Web Access.
  - Certificate renewal and expiration management
    For security reasons, VPN certificates have an expiration date, after which the certificates must be replaced with new ones.
- Application Access Portal
- Mobile VPN & VPN client
- VPN & access rules
- Reconfiguring existing VPNs
  You can reconfigure and tune existing VPNs.

VPN authentication & certificates

A digital certificate is a proof of identity. SMCaaS supports using certificates for authenticating gateways and the Forcepoint VPN Client.

Certificate-based authentication in VPNs
In all site-to-site VPNs and in mobile VPNs with third-party VPN clients, you can use certificates for authentication.
VPN certificates and how they work
Certificates can be used for authenticating VPN gateways and the Forcepoint VPN Client.
Pre-shared key (PSK) authentication in VPNs
A pre-shared key is a string of characters that is used as an authentication key. You can use pre-shared keys for site-to-site VPN authentication and with third-party VPN clients.
Certificate authority (CA) trust configuration
You can authenticate administrators using an X.509 certificate stored in the Windows certificate store, on a smart card like a Common Access Card (CAC), or via SMC Web Access.
Certificate renewal and expiration management
For security reasons, VPN certificates have an expiration date, after which the certificates must be replaced with new ones.

Copyright © 2026 Forcepoint LLC