Merge pull request #85467 from cherylmc/patch-9

Update vpn-gateway-faq-p2s-azurecert-include.md

Author: v-shils

includes/vpn-gateway-faq-p2s-azurecert-include.md

@@ -5,16 +5,20 @@
  author: cherylmc
  ms.service: vpn-gateway
  ms.topic: include
- ms.date: 03/21/2018
+ ms.date: 08/14/2019
  ms.author: cherylmc
  ms.custom: include file
 ---
 [!INCLUDE [P2S FAQ All](vpn-gateway-faq-p2s-all-include.md)]
 
-### Can I use my own internal PKI root CA for Point-to-Site connectivity?
+### Can I use my own internal PKI root CA to generate certificates for Point-to-Site connectivity?
 
 Yes. Previously, only self-signed root certificates could be used. You can still upload 20 root certificates.
 
+### Can I use certificates from Azure Key Vault?
+
+No.
+
 ### What tools can I use to create certificates?
 
 You can use your Enterprise PKI solution (your internal PKI), Azure PowerShell, MakeCert, and OpenSSL.
@@ -34,4 +38,4 @@ You can use your Enterprise PKI solution (your internal PKI), Azure PowerShell,
     * For the client certificate:
 
       * When creating the private key, specify the length as 4096.
-      * When creating the certificate, for the *-extensions* parameter, specify *usr_cert*.
+      * When creating the certificate, for the *-extensions* parameter, specify *usr_cert*.