Load p12 to get root cert or when doing RSASIG auth to get all three files? Under "IPSEC-TOOLS" what does "clientaddr" mean? Once I get -current running I need to find a way to pass a meaningful hook call on the server when a new phase1 is established or deleted. Is this, by any chance what you might mean? Peter