Hi Everyone, I am try to set up a cert-based ipsec vpn, using a windows 2008r2 server and windows xp sp3 client. i setup a enteprise root ca and configured the vpn by following these steps http://technet.microsoft.com/en-us/library/dd637815(WS.10).aspx and configured the client to connect using these steps http://support.microsoft.com/kb/314076, the problem i now face is that when i try to request a certificate for the client using the certificate request wizard, it gives me an error saying: The wizard cannot be started because of one or more of the following conditions: -There are no trusted certification authorities (CAs)available. -You do not have the permissions to request certificates from the available CAs. -The available CAs issue certificates for which you do not have permissions. Am i doing any step wrongly, please advice. Also if i have also missed out other important information i would be glad to provide them. Thank You.