[slimo]

Thanks for the reply. I already did this because before the error was unknown user. So I am one step further now

Apparently, I need to
1. generate a certificate request in the FW object VPN property sheet
2. send the request to MS CA
3. apply the reply on the FW

Is that correct?

Slimo