We're looking at deploying VPN's for our mobile users and reading through Tom's ISA Server 2004 book I should be looking to deploy L2TP/IPSec. Now I'm happy with that, but there's not much in there (and I wouldn't expect there to be) about setting certificate services. I've done the usual Google and Microsoft website searches but I can't find much in the way of web pages. My main question/problem, is I've been playing with certificate services in my VMWare environment and managed to install it on one DC, but can I install it, and share the load across two DC's? If it's possible and someone knows of a good web article, can you point this Friday weary guy in it's direction please. Much appreciated. Regards, Steve Steve Lunn Technical Support Technician - Microsoft MCP engage Mutual Assurance