Anders Gustafsson,

>> Could that cause *some* clients to refuse to connect? I
>> still can't reproduce the issue on my own machine, but it's inside the
>> firewall.

> Sounds unlikely, but I'd renew them just as well.

It seemed unlikely to me as well, but after I ran PKIDIAG and TCKEYGEN
on the iFolder server, the issue was fixed for at least one user.