Virtual Private Network (VPN)

No certificate is requested via autoenrollment if a user is connected via Virtual Private Network (VPN)

Assume the following scenario:

A user works remotely via Virtual Private Network (VPN)
Actually, a certificate should be requested via autoenrollment, but this is not done
A connection test (certutil -ping) to the certification authority throws the following error message:

Server could not be reached: The RPC server is unavailable. 0x800706ba (WIN32: 1722 RPC_SERVER_UNAVAILABLE) -- (31ms)

CertUtil: -ping command FAILED: 0x800706ba (WIN32: 1722 RPC_S_SERVER_UNAVAILABLE)
CertUtil: The RPC server is unavailable.

Clients connected via Virtual Private Network (VPN) do not renew certificates automatically

Assume the following scenario:

Client computers automatically obtain certificates from an Active Directory integrated certificate authority (Enterprise Certification Authority).
Expiring certificates are renewed automatically when the clients are on the internal network.
However, expiring certificates are not automatically renewed when clients are connected via Virtual Private Network (VPN).
This can result in clients not renewing their certificate in time before it expires and no longer being able to connect to the VPN.

English