Ummm, if you are using those scripts then you have local certs which are different on each server...and thus the client wouldnt match. If you require both servers to be used by the same client then you need to use the same CA on both server installs. Likewise, only one server/CA should be making your client cert. alan -- This smartphone uses free WiFi around the world with eduroam, now that's what I call smart.