Ok now. This was a great thing. The differences between MS and Tom's way. I removed the "request appears to come from original client" and put in request comes from ISA. Now it works. Got me thinking if my laptop has or has not updated to the new root cert in AD. Thanks anyway people, especially Andrew, Tom and Steve who have put a lot of energy in replying my annoying questions. Works like a charm now. Mats Hellman