Digital Certificate Support Summary

As you can see, there are a number of steps involved in configuring digital-certificate support for use with the IKE Phase 1 tunnel. However, this process is the only difference between the use of preshared keys and certificates. IKE Phase 2 configurations are exactly the same whether using certificates or preshared keys for authentication.