I have been using a StrongSwan server in conjunction with Windows certificate autoenrollment to allow my Windows clients to connect to StrongSwan via IKEv2 for a while. StrongSwan has a rough guide available on their wiki[1]. The only hangup I ran into was that Windows 7 is very particular about what OIDs need to be present in the certificates both on the server and client side[2].<p>[1]<a href="https:&#x2F;&#x2F;wiki.strongswan.org&#x2F;projects&#x2F;strongswan&#x2F;wiki&#x2F;Windows7" rel="nofollow">https:&#x2F;&#x2F;wiki.strongswan.org&#x2F;projects&#x2F;strongswan&#x2F;wiki&#x2F;Windows...</a><p>[2] <a href="https:&#x2F;&#x2F;wiki.strongswan.org&#x2F;projects&#x2F;strongswan&#x2F;wiki&#x2F;Win7CertReq" rel="nofollow">https:&#x2F;&#x2F;wiki.strongswan.org&#x2F;projects&#x2F;strongswan&#x2F;wiki&#x2F;Win7Cer...</a>