entrust profile error

[apostollic]

When using entrust profile for VPN client 5/0/3..I get a incomplete certificate chain..I have loaded the entrust.net server CA on the VPN 3000, but still can't get in...any ideas..the microsoft import store is grayed out on the client

[#2]

Problem: The "Error installing SSL certificate: Incomplete chain" displays within SSL certificate installation on the VPN 3000 Series Concentrator.

Cause: This parse error displays if the VPN concentrator does not have a root Certificate Authority (CA) certificate installed.

Resolution: Regardless of whether Simple Certificate Enrollment Protocol (SCEP) or manual enrollment is used, the VPN concentrator must have a root CA installed if third-party certificates are used. In order to obtain and install the Secure Socket Layer (SSL) certificates, perform this procedure:

Obtain and install the root CA certificate.

Create an enrollment request for one or more identity certificates.

Request an identity certificate from the same CA that issued the root CA certificate.

Install the identity certificate on the VPN concentrator.

Enable Certificate Revocation List (CRL) checking and caching.

Enable Certificates.