We have VPN users who are working from remote locations. If user is outside the corporate network for a long time, Machine certificate will not be renewed over VPN machines. Is it true that machine will be not able to connect to VPN if machine certificate is expired? If machine certificate is already epxired if user is not connected to domain, how do I renew machine certificate for remote VPN user wihtout connecting to corporate network? Also,If I see the machine certificate template, vaidity is set to 1 year and 'Renewal Period' is set to 6 weeks. Does it mean that our clients have 6 weeks of grace period to renew machine certificate? so, whether clients able to connect to VPN aftrer the machine certificare expiry also? This information is little urgent.. please help meMahesh

Please refer to the answer of your repeated/duplicate question in this thread http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/9ab1c1e0-75ff-4e18-ab69-27e419b414cb /Hasain

Please refer to the answer of your repeated/duplicate question in this thread http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/9ab1c1e0-75ff-4e18-ab69-27e419b414cb /Hasain

Thanks for your answer Is it possible for remote user to connect to VPN even after machine certificate is expired. If renewal is not possble after expiery, how do I request and renew machine certificate for VPN user who is in remote location? is he no longer able to connect to VPN unless he login to corporate network and get the new certificate.Mahesh