format

Author: cherylmc

articles/vpn-gateway/TOC.yml

@@ -163,14 +163,18 @@
             href: point-to-site-vpn-client-certificate-openvpn-ios.md
       - name: Generate self-signed certificates
         items:
-        - name: Azure PowerShell - .cer and .pfx files
-          href: vpn-gateway-certificates-point-to-site.md
-        - name: Makecert - .cer and .pfx files
-          href: vpn-gateway-certificates-point-to-site-makecert.md
-        - name: Linux - OpenSSL - .pem files
-          href: point-to-site-certificates-linux-openssl.md
-        - name: Linux - strongSwan - .pem files
-          href: vpn-gateway-certificates-point-to-site-linux.md
+        - name: .cer and .pfx files
+          items:
+           - name: Azure PowerShell
+             href: vpn-gateway-certificates-point-to-site.md
+           - name: Makecert
+             href: vpn-gateway-certificates-point-to-site-makecert.md
+        - name: .pem files
+          items:
+          - name: Linux - OpenSSL
+            href: point-to-site-certificates-linux-openssl.md
+          - name: Linux - strongSwan
+            href: vpn-gateway-certificates-point-to-site-linux.md
       - name: Install VPN client certificates
         href: point-to-site-how-to-vpn-client-install-azure-cert.md
     - name: Microsoft Entra ID authentication

articles/vpn-gateway/point-to-site-certificates-linux-openssl.md

@@ -11,7 +11,7 @@ ms.author: cherylmc
 ---
 # Generate and export certificates - Linux - OpenSSL
 
-VPN Gateway point-to-site (P2S) connections can be configured to use certificate authentication. The root certificate public key is uploaded to Azure and each VPN client must have the appropriate certificate files installed locally in order to connect. This article helps you create a self-signed root certificate and generate client certificates using OpenSSL. For more information, see [Point-to-site configuration - certificate authentication](vpn-gateway-howto-point-to-site-resource-manager-portal.md). The steps in this exercise help you create *.pem* files. If you need *.pfx* and *.cer* files instead, see the [Windows- PowerShell](vpn-gateway-certificates-point-to-site.md) instructions.
+This article helps you create a self-signed root certificate and generate client certificate **.pem** files using OpenSSL. If you need *.pfx* and *.cer* files instead, see the [Windows- PowerShell](vpn-gateway-certificates-point-to-site.md) instructions.
 
 ## Prerequisites
 

articles/vpn-gateway/vpn-gateway-certificates-point-to-site-linux.md

@@ -11,9 +11,9 @@ ms.author: cherylmc
 ---
 # Generate and export certificates - Linux (strongSwan)
 
-VPN Gateway point-to-site connections can use certificates to authenticate. This article shows you how to create a self-signed root certificate and generate client certificates using strongSwan. The steps in this exercise help you create *.pem* files. If you need *.pfx* and *.cer* files instead, see the [Windows- PowerShell](vpn-gateway-certificates-point-to-site.md) instructions.
+This article shows you how to create a self-signed root certificate and generate client certificates using strongSwan. The steps in this exercise help you create certificate **.pem** files. If you need *.pfx* and *.cer* files instead, see the [Windows- PowerShell](vpn-gateway-certificates-point-to-site.md) instructions.
 
-Each client must have a client certificate installed locally to connect. Additionally, the root certificate public key information must be uploaded to Azure. For more information, see [Point-to-site configuration - certificate authentication](vpn-gateway-howto-point-to-site-resource-manager-portal.md).
+For point-to-site connections, each VPN client must have a client certificate installed locally to connect. Additionally, the root certificate public key information must be uploaded to Azure. For more information, see [Point-to-site configuration - certificate authentication](vpn-gateway-howto-point-to-site-resource-manager-portal.md).
 
 ## <a name="install"></a>Install strongSwan
 

articles/vpn-gateway/vpn-gateway-certificates-point-to-site-makecert.md

@@ -11,7 +11,7 @@ ms.author: cherylmc
 ---
 # Generate and export certificates for Point-to-Site connections using MakeCert
 
-Point-to-Site connections use certificates to authenticate. This article shows you how to create a self-signed root certificate and generate client certificates using MakeCert. The steps in this article help you create **.pfx** and **.cer** files. If you're looking for different certificate instructions, see [PowerShell - .pfx and .cer certificate files](vpn-gateway-certificates-point-to-site.md) or [Linux- OpenSSL - .pem certificate files](point-to-site-certificates-linux-openssl.md).
+This article shows you how to create a self-signed root certificate and generate client certificates using MakeCert. The steps in this article help you create **.pfx** and **.cer** files. If you're looking for different certificate instructions, see [PowerShell - .pfx and .cer certificate files](vpn-gateway-certificates-point-to-site.md) or [Linux- OpenSSL - .pem certificate files](point-to-site-certificates-linux-openssl.md).
 
 We recommend using the [Windows 10 or later PowerShell steps](vpn-gateway-certificates-point-to-site.md) to create your certificates. We provide these MakeCert instructions as an optional method. The certificates that you generate using either method can be installed on [any supported client operating system](vpn-gateway-howto-point-to-site-resource-manager-portal.md#faq). MakeCert has the following limitation:
 

articles/vpn-gateway/vpn-gateway-certificates-point-to-site.md

@@ -11,7 +11,7 @@ ms.author: cherylmc
 ---
 # Generate and export certificates for point-to-site using PowerShell
 
-Point-to-site connections use certificates to authenticate. This article shows you how to create a self-signed root certificate and generate client certificates using PowerShell on Windows 10 or later, or Windows Server 2016 or later. The steps in this article help you create **.pfx** and **.cer** files. If you don't have a Windows computer, you can use a small Windows VM as a workaround.
+This article shows you how to create a self-signed root certificate and generate client certificates using PowerShell on Windows 10 or later, or Windows Server 2016 or later. The steps in this article help you create **.pfx** and **.cer** files. If you don't have a Windows computer, you can use a small Windows VM as a workaround.
 
 The PowerShell cmdlets that you use to generate certificates are part of the operating system and don't work on other versions of Windows. The host operating system is only used to generate the certificates. Once the certificates are generated, you can upload them or install them on any supported client operating system.