I have a root CA on a vpn concentrator of 4096 bits. Intermediate CA certs are 2048 and will install fine. The Intermediate certs give the option of 'Accept Identity Certificates signed by this issuer' (on version 4.7 software) so I am assuming (correctly or incorrectly) that when I install the identity cert it will work (and not throw an error). Question: do I still need the root CA and if I do am I scuppered since the concentrator will not accept a cert with 4096 bits.
If this is the case will I have to wait for a newer version of hardware or software or both?
Thanks,
Vincent
