I have issued a new certificate using iManager with a csr I generated from the gwcsrgen utility. After adding the certificate files into the correct fields in consoleone etc, the certificate works on the grouopwise client. But every client has to accept the certificate the first time. I thought if it was an internal certificate this would be fine, as they are on the internal network and can see the CA server.

Is there something I have missed?