What is "Encryption Failure: one of the keys is not yet valid"? Answer What this means is that the clocks on one of the two firewalls is not correct. SKIP and IPSec with certificates rely on the date and time being the same (or close to the same) on all the machines in the VPN. Set the machines to the same time (relative to GMT, they can be in different time zones), completely regenerate the CA/DH keys for SKIP, appropriate certificates for IPSec.
--
RobertGraham - 07 Jan 2004
FAQForm FAQs.Class:
EncryptionFAQs FAQs.OS: FAQs.Version: