System is as following:

NW6.5
BM 3.8 SP3
Latest VPN Client
IKE VPN

All patched like http://www.craigjconsulting.com/!

I have checked everything on and on. Now i don't know any further
procedures. After 5 days VPN stops working without console error message.
Then I've to reboot the server (stopvpn hangsup the server)
Our Clients then gets a message like (This is not a VPN Server or IKE is
not loaded)

Only vpn stops its function, all the other services and the server itself
runs without any problems!

IKE.LOG:

IKE Debug Log start time :21.6.2005 07:48:29
21.6.2005 07:48:29 Read trusted root cert file SYS:/ETC/IKE/ROOTCERT/C2S001.DER
21.6.2005 07:48:29 Read trusted root cert file SYS:/ETC/IKE/ROOTCERT/SRV001.DER
21.6.2005 07:48:29 Read trusted root cert file SYS:/ETC/IKE/ROOTCERT/C2S001.DER
21.6.2005 07:48:29 Read trusted root cert file SYS:/ETC/IKE/ROOTCERT/SRV001.DER
21.6.2005 07:48:35 ***Receive Main Mode message from 62.46.145.16
21.6.2005 07:48:35
I-COOKIE=7D90B7AFCF5E3C6E,R-COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=2011063048
21.6.2005 07:48:35 Start IKE-SA 63923000 -
Responder,src=192.168.10.10,dst=62.46.145.16,TotSA =1
21.6.2005 07:48:35 IKE SA NEGOTIATION: Peer lifetime = 28800 My lifetime=28800
21.6.2005 07:48:35 sending notify message type: 28 to 62.46.145.16
21.6.2005 07:48:35 ***Send Unacknowledge Informational message to 62.46.145.16
21.6.2005 07:48:35
I-COOKIE=7D90B7AFCF5E3C6E,R-COOKIE=36C2BA0ED8B340E0,MsgID=567F8411,1stPL=NOTIF Y-PAYLOAD,state=2011063212
21.6.2005 07:48:35 Error :Server certificate not available , probably error
reading certificate
21.6.2005 07:48:35 Processed SA-PAYLOAD unsuccessful - No usage certificate
available for signature authentication, dst=62.46.145.16.
21.6.2005 07:48:35 Error processing the first MM packet - No usage
certificate available for signature authentication
21.6.2005 07:48:39 IKE-SA 63923000 is
Deleted,I-COOKIE=7D90B7AF,R-COOKIE=36C2BA0E,dst=62.46.145.16
21.6.2005 07:48:39 State:0 Cond:4 TimerEvent:1
21.6.2005 07:48:39 lifetime :0 sec Rekey Time :0 sec
21.6.2005 07:48:39 Created at :0 sec Remaining life time :-507611 sec
Current time 507611
21.6.2005 07:48:39 The client 62.46.145.16 removed from vpninf

21.6.2005 07:48:40 ***Receive Main Mode message from 62.46.145.16
21.6.2005 07:48:40
I-COOKIE=7D90B7AFCF5E3C6E,R-COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=2011063048
21.6.2005 07:48:40 Start IKE-SA 63923000 -
Responder,src=192.168.10.10,dst=62.46.145.16,TotSA =1
21.6.2005 07:48:40 IKE SA NEGOTIATION: Peer lifetime = 28800 My lifetime=28800
21.6.2005 07:48:40 sending notify message type: 28 to 62.46.145.16
21.6.2005 07:48:40 ***Send Unacknowledge Informational message to 62.46.145.16
21.6.2005 07:48:40
I-COOKIE=7D90B7AFCF5E3C6E,R-COOKIE=36C2BA0ED8B340E0,MsgID=7468540E,1stPL=NOTIF Y-PAYLOAD,state=2011063212
21.6.2005 07:48:40 Error :Server certificate not available , probably error
reading certificate
21.6.2005 07:48:40 Processed SA-PAYLOAD unsuccessful - No usage certificate
available for signature authentication, dst=62.46.145.16.
21.6.2005 07:48:40 Error processing the first MM packet - No usage
certificate available for signature authentication
21.6.2005 07:48:44 IKE-SA 63923000 is
Deleted,I-COOKIE=7D90B7AF,R-COOKIE=36C2BA0E,dst=62.46.145.16
21.6.2005 07:48:44 State:0 Cond:4 TimerEvent:1
21.6.2005 07:48:44 lifetime :0 sec Rekey Time :0 sec
21.6.2005 07:48:44 Created at :0 sec Remaining life time :-507616 sec
Current time 507616
21.6.2005 07:48:44 The client 62.46.145.16 removed from vpninf

21.6.2005 07:48:47 ***Receive Main Mode message from 62.46.145.16
21.6.2005 07:48:47
I-COOKIE=7D90B7AFCF5E3C6E,R-COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=2011063048
21.6.2005 07:48:47 Start IKE-SA 63923000 -
Responder,src=192.168.10.10,dst=62.46.145.16,TotSA =1
21.6.2005 07:48:47 IKE SA NEGOTIATION: Peer lifetime = 28800 My lifetime=28800
21.6.2005 07:48:47 sending notify message type: 28 to 62.46.145.16
21.6.2005 07:48:47 ***Send Unacknowledge Informational message to 62.46.145.16
21.6.2005 07:48:47
I-COOKIE=7D90B7AFCF5E3C6E,R-COOKIE=36C2BA0ED8B340E0,MsgID=3826051F,1stPL=NOTIF Y-PAYLOAD,state=2011063212
21.6.2005 07:48:47 Error :Server certificate not available , probably error
reading certificate
21.6.2005 07:48:47 Processed SA-PAYLOAD unsuccessful - No usage certificate
available for signature authentication, dst=62.46.145.16.
21.6.2005 07:48:47 Error processing the first MM packet - No usage
certificate available for signature authentication
21.6.2005 07:48:49 IKE-SA 63923000 is
Deleted,I-COOKIE=7D90B7AF,R-COOKIE=36C2BA0E,dst=62.46.145.16
21.6.2005 07:48:49 State:0 Cond:4 TimerEvent:1
21.6.2005 07:48:49 lifetime :0 sec Rekey Time :0 sec
21.6.2005 07:48:49 Created at :0 sec Remaining life time :-507621 sec
Current time 507621
21.6.2005 07:48:49 The client 62.46.145.16 removed from vpninf

21.6.2005 07:48:57 ***Receive Main Mode message from 62.46.145.16
21.6.2005 07:48:57
I-COOKIE=7D90B7AFCF5E3C6E,R-COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=2011063048
21.6.2005 07:48:57 Start IKE-SA 63923000 -
Responder,src=192.168.10.10,dst=62.46.145.16,TotSA =1
21.6.2005 07:48:57 IKE SA NEGOTIATION: Peer lifetime = 28800 My lifetime=28800
21.6.2005 07:48:57 sending notify message type: 28 to 62.46.145.16
21.6.2005 07:48:57 ***Send Unacknowledge Informational message to 62.46.145.16
21.6.2005 07:48:57
I-COOKIE=7D90B7AFCF5E3C6E,R-COOKIE=36C2BA0ED8B340E0,MsgID=31DAAF16,1stPL=NOTIF Y-PAYLOAD,state=2011063212
21.6.2005 07:48:57 Error :Server certificate not available , probably error
reading certificate
21.6.2005 07:48:57 Processed SA-PAYLOAD unsuccessful - No usage certificate
available for signature authentication, dst=62.46.145.16.
21.6.2005 07:48:57 Error processing the first MM packet - No usage
certificate available for signature authentication
21.6.2005 07:48:59 IKE-SA 63923000 is
Deleted,I-COOKIE=7D90B7AF,R-COOKIE=36C2BA0E,dst=62.46.145.16
21.6.2005 07:48:59 State:0 Cond:4 TimerEvent:1
21.6.2005 07:48:59 lifetime :0 sec Rekey Time :0 sec
21.6.2005 07:48:59 Created at :0 sec Remaining life time :-507631 sec
Current time 507631
21.6.2005 07:48:59 The client 62.46.145.16 removed from vpninf




It seems to be a certificate issue, but i can't find any errors.
pkidiag runs fine, but it says:

ERROR -328 creation a NPKIT_x509 context.
Step 6 failed -328.


I've tried to make the VPN Server NDS-Master, but nothing changed. The
thing is that everything runs fine for about 5 days!


This is an urgent issue cause our sales persons need the vpn connection for
homeoffice usage.


Hope somebody could help me with this strange issue,
Regards
Gerhard