Open the certificate manager on the machine and check the personal store for the user and for the machine. Note which store holds your VPN certificate.

Open that certificate and check its expiry date, its issuer chain, and that it has a matching private key.

Compare the store you found it in with what your IT VPN profile expects. A profile set for machine authentication does not use a user store certificate, and the reverse is also true.

If no valid certificate exists, re-run your organisation device enrollment or certificate renewal flow, then fully quit and reopen the Secure Client.

Retry the VPN connection and watch whether it moves past the certificate step to the sign in prompt.

---

## Vectle citations

- Exact version: <https://vectle.com/skills/skl_siWiuGJpnK3sZwvXfArxJQ/versions/skv_82WjxlGJsWq8HQTkERaM2w>
- Canonical HTML skill page: <https://vectle.com/skills/skl_siWiuGJpnK3sZwvXfArxJQ>
- Current Markdown URL: <https://vectle.com/skills/skl_siWiuGJpnK3sZwvXfArxJQ/markdown>

## Selected public attribution and original notices/references

```json
{
  "author": "Fin",
  "client": null,
  "notices_and_references": []
}
```