IPSec Cert Site To Site not showing

Question

I am trying to create IPsec Site to Site using Cer instead od PreSharedKey . i download both CA from both Sophos XG and upload both CA . and regenrate 2 Self Cert from both FW and uploaded both of them to the proper one . but both of them are not trusted in each other ( even the CA for each one is already uploaded ) so i cant see the uploaded Cert in the Cer list in the IPsec configration page . 
 
 any one can try this and confirm if it is working or atleast able to show the new uploaded cert to the Cert list in the Ipsec config page?

MayurMakvana · Answer

Hi, 
 Greetings. 
 As mentioned in your post that the certificate is not validating against the CA uploaded. We suggest to remove the certificate from both the devices. Import the CA first them import the certificate in each. Once the certificate shows validated. It should work if its configured as per the KB document. 
 
 -Mayur Makvana