2008 R2 Certificate authority and Always-on-VPN

HI all

Apologizes if this is in the wrong forum, but it's the vest fit I felt.

We currently user DirectAccess for always on connections, but with EOL announced we want to start moving to the Always-On-VPN model.

Currently our DA is 2016 DC edition but our backed end CA is running 2008R2, and we don't have options for for making the Cert compatible with 2012 onwards, nor with Windows 10 laptops as per https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/vpn-deploy-server-infrastructure.

Is this compatibility necessary, are there options beside upgrading our CA server which would be a large undertaking.

Thanks

David Kafrissen

Network Admin

RVK, Inc.

Portland Or.