Our organization has been going through several changes. One of which is putting devices in the hands of users that would not be at one of our office locations potentially ever. This means that domain accounts will need to be managed and accessible remotely. The way we are going to accomplish this is through a SonicWall Secure Mobile Access 6210 and always-on VPN. The idea is that we will have a CA certificate imported to the SMA and an accompanying CA cert with a client cert also installed on the machine. We will use the SonicWall Connect Tunnel to automatically complete the PKI authentication with no access to the internal resources. Then the user will authenticate through AD and then be provided with the appropriate resources.
We have the PKI structure up and going. It is 2 tier. One offline Root CA and one online Subordinate CA that...