Hi mates,I'm running and online CA on windows 2003 server. I use it to create certificate for VPN Ipsec Access. The certificate request (via web) must be created to store the certificate in the computer's local store. To make it compatible with windows vista clients I need to apply a compatibility update. I works fine except that one the server is updated I cannot store the certificates in the computer's store. I've tried moving the certificate via MMC but it doesn't work, the certificates created since the update are not valid to connect to the VPN.Any idea to fix it?Big Thanx!

Hi,Is it a standalone CA or an Enterprise CA?Please export the certificate with private key, then import into the comptuer store and check if it works.Thanks.This posting is provided "AS IS" with no warranties, and confers no rights.

It's an Online Enterprise CA. I need to get it work with the web enrollment. To export the private key should I modify the certificate template? Activating the private key export can reduce the security of our network??Thank you.

Hi,Yes. By default, the private key of IPSec certificate is not exportable.Another option is that you can create a certificate request and request a machine certificate with the certreq.exe utility. For more information, please refer to the following article: Appendix 3: Certreq.exe Syntaxhttp://technet.microsoft.com/en-us/library/cc736326(WS.10).aspx<!---->This posting is provided "AS IS" with no warranties, and confers no rights.