You have 10 servers that run Windows Server in a workgroup. You need to configure the servers to encrypt all the network traffic between the servers. The solution must be as secure as possible…

NTLMv2 is an authentication protocol primarily used for user and computer authentication in Windows, but it is less secure and not the recommended or most robust method for authenticating IPsec connections, especially when maximum security is desired.

Pre-shared key (PSK) authentication is simpler but less secure than certificates because the same secret key must be distributed and securely maintained on all servers, which poses a higher risk of compromise if the key is exposed.

KerberosV5 authentication relies on the presence of an Active Directory Domain Controller to issue tickets, making it unsuitable and unusable in a workgroup environment where no domain controller is present.

Computer certificates provide the strongest and most secure authentication method for IPsec connection security rules, especially in a workgroup environment where KerberosV5 is unavailable. Certificates use public key infrastructure (PKI) for cryptographic identification and validation, offering robust security, scalability, and non-repudiation, making them superior to pre-shared keys by eliminating the risk of a single shared secret compromise.