Merge pull request #203514 from cherylmc/globl-hub

add xml tags

Author: PRMerger4

articles/virtual-wan/openvpn-azure-ad-client.md

@@ -6,7 +6,7 @@ author: cherylmc
 
 ms.service: virtual-wan
 ms.topic: how-to
-ms.date: 03/24/2022
+ms.date: 06/30/2022
 ms.author: cherylmc
 
 ---
@@ -150,7 +150,7 @@ These steps help you configure your connection to connect automatically with Alw
 
 You can modify the downloaded profile XML file and add the **\<dnssuffixes>\<dnssufix> \</dnssufix>\</dnssuffixes>** tags.
 
-```
+```xml
 <azvpnprofile>
 <clientconfig>
 
@@ -168,7 +168,7 @@ You can modify the downloaded profile XML file and add the **\<dnssuffixes>\<dns
 
 You can modify the downloaded profile XML file and add the **\<dnsservers>\<dnsserver> \</dnsserver>\</dnsservers>** tags.
 
-```
+```xml
 <azvpnprofile>
 <clientconfig>
 
@@ -187,9 +187,9 @@ You can modify the downloaded profile XML file and add the **\<dnsservers>\<dnss
 
 ### <a name="multi-cert"></a>Can I specify multiple certificates for the VPN client?
 
-If you have 2 hubs for your virtual WAN that are each configured for P2S User VPN and use the same VPN configuration, and that configuration is configured to use multiple certificates, you can now configure the VPN clients for multiple certificates. This means that if one certificate can't be used for any reason, the other certificate can still be used for authentication. Previously, you couldn't configure the client with the settings for both certificates. Go to the Virtual WAN -> User VPN configurations page, select the User VPN configuration used by both hubs, then select **Download virtual WAN user VPN profile** to download the global user VPN profile (rather than the hub profile). The files you download contain the root end certificates.
+If you have 2 hubs for your virtual WAN that are each configured for P2S User VPN and use the same VPN configuration, and that configuration is configured to use multiple certificates, you can now configure the VPN clients for multiple certificates. This means that if one certificate can't be used for any reason, the other certificate can still be used for authentication. Previously, you couldn't configure the client with the settings for both certificates.
 
-You can configure multiple certificate support on the client side by either using the Azure VPN Client interface (version 2.1963.44.0 or higher), or by using multiple certificate tags in the xml profile.
+To configure, go to the Virtual WAN -> User VPN configurations page. Select the User VPN configuration used by both hubs, then select **Download virtual WAN user VPN profile** to download the global user VPN profile (rather than the hub profile). The files you download contain the root end certificates. You can configure multiple certificate support on the client side by either using the Azure VPN Client interface (version 2.1963.44.0 or higher), or by modifying the xml profile to include multiple certificate tags.
 
 Example:
 
@@ -224,7 +224,7 @@ Example:
 
 You can modify the downloaded profile XML file and add the **\<includeroutes>\<route>\<destination>\<mask> \</destination>\</mask>\</route>\</includeroutes>** tags.
 
-```
+```xml
 <azvpnprofile>
 <clientconfig>
 
@@ -242,7 +242,7 @@ You can modify the downloaded profile XML file and add the **\<includeroutes>\<r
 
 You can modify the downloaded profile XML file and add the **\<includeroutes>\<route>\<destination>\<mask> \</destination>\</mask>\</route>\</includeroutes>** tags.
 
-```
+```xml
 <azvpnprofile>
 <clientconfig>
 
@@ -263,7 +263,7 @@ You can modify the downloaded profile XML file and add the **\<includeroutes>\<r
 
 You can modify the downloaded profile XML file and add the **\<excluderoutes>\<route>\<destination>\<mask> \</destination>\</mask>\</route>\</excluderoutes>** tags.
 
-```
+```xml
 <azvpnprofile>
 <clientconfig>
 
@@ -281,7 +281,7 @@ You can modify the downloaded profile XML file and add the **\<excluderoutes>\<r
 
 You can import the profile from a command-line prompt by placing the downloaded **azurevpnconfig.xml** file in the **%userprofile%\AppData\Local\Packages\Microsoft.AzureVpn_8wekyb3d8bbwe\LocalState** folder and running the following command:
 
-```
+```xml
 azurevpn -i azurevpnconfig.xml 
 ```
 To force the import, use the **-f** switch.