title: Is private key needed in Azure point to site VPN?
body: <p>I am unable to understand the certificate requirement for Azure Point to Site VPN. I am of the understanding that whenever a certificate is generated by Enterprise CA, it has a public and private key. Hence when we upload the Root Certificate to Azure VPN, we need to upload with BOTH private and public key. Is my understanding correct? Also, the root certificate, with only the public key, must be installed in the user(client) machines. Additionally, the user(client) machines must have client certificates, with only public key, that are generated from the root certificate</p>
  <p>Please let me know if my understanding is correct.</p>