A、Use a password generator application to create a preshared key， and distribute it to all mobile users

B、Use computer autoenrollment to create digital certificates that can be used to authenticate to a VPN server

C、Acquire a digital certificate that can be used for SSL from a commercial CA for each computer that established a VPN connection

D、Configure IPSec policies on all Routing and Remote Access servers to require the use of digital certificates