New (2008 / Lognhorn) IPSec (Offline request) certificates not working on XP

Hi,

I have VPN set up for only L2TP connections. All users that were allowed to
login remotely obtained an IPSec (Offline request) certificate from the
CERTSRV website. Everything was working just fine for years. Then Vista
came along. Vista didn't work with the 2003 certificates. You had to
obtain a hotfix and apply it to your certificate server to install 2008
certificate templates. I have done this, and configured a Vista PC to
connect. Today one of my user's IPSec (Offline request) certificate
expired. So I went to renew it. Instead of placing the certificate in the
Local Computer store it placed it in the Current User store. I copied it to
(Local Computer)>Personal. It doesn't work. The certificate authority is
in Trusted Root Certification Authorities of both Current User and (Local
Computer).

I am worried that only Vista clients can now download new certificates. Is
this correct. What can I do?

TIA,

Jarryd