The IPsec local X509 certificate needs certificate objects

Question

Hi, 
 We are using Sophos SG230 UTM. We have already created an Ipsec tunnel with out HO network and Supplier network and is working perfectly. Now, we want one more tunnel between our office and another supplier network but when I try to create new IPSec connection, it does not save the connection and displays following message: 
 "The IPsec local X509 certificate needs certificate objects" 
 I am trying to create tunnel on same interface on which previous tunnel is created. 
 Please advise.

sachingurung · Accepted Answer

Hi, 
 Greetings. 
 I reproduced the instance, when UTM do not have an object of the local certificate which is configured for IPSec connection through UTM, you cannot deploy IPSec configuration. 
 
 Check the certificate you are using by navigating through option Site-to-Site-VPN>IPSec>Advance>Local X509 Certificate. 
 I think the certificate object is deleted or changed. You can verify the certificate from Site-to-Site-VPN>IPSec>Certificate Managemet. You can create a new local certificate for VPN, if necessary. 
 Interestingly, when I deleted the certificate it did not effect the Active tunnel. Hence, I suspect the established tunnel has no effect on your end. 
 Hope that helps. 
 Thanks 
 Sachin Gurung