webvpn - using certificates from a certificate authority

[n.phipps]

Hi

Has any one used or is using webvpn in terms of a PKI. We have been using webvpn on a limited scale using the self signed certicate and it works ok. But users get asked to install the certificate and then ok the certificate due to the name being incorrect. My understanding is that if we use an established PKI & the clients have up to date certificates they wont get asked to install or ok certificates. At least until they expire!

Any guidance appreciated.

thanks

Norman

[drolemc]

Once the certificate is installed, a reinstallation is not necessary each time the IPSec connectivity is to be established.