Fighting iOS paranoia

Newer iOS version do not trust custom issued certificates by default. To make a certificate trusted, do the following:

1. Send the CA certificate to some other email available from the device as an attachment.
2. Once received, tap on it and install it to a "profile"
3. Go to Settings->General->About->Certificate Trust Settings
4. You should see your CA certificate profile there. Make it trusted.

Cisco VPN client issue

Windows 8.1 with Bing, came with a netbook computer.
Need to make work the Cisco VPN client which gives the following error on a connect attempt:

Secure VPN Connection terminated locally by the Client, Reason: 440 Driver Failure

Tried this solution to install Citrix DNE. Did not help.

The event viewer shows that the driver signature can not be verified.
Desperatly did the following to make it work:

1. Turned off the BitLocker. Well, why I need a secured notebook which I can not use?
2. Disabled UEFI's Secured Boot. 
3. Executed the following commands:
   bcdedit -set loadoptions DISABLE_INTEGRITY_CHECKS
   bcdedit -set TESTSIGNING ON
4. Reinstalled the Cisco VPN client.

Works now!

A certification pit

Each time we need renew or issue a new certificate for test web servers it becomes a quest. The certification server is installed on a windows 2003 server and each time it behaves different. I wonder, if somebody noticed that too?
It works differently in different browsers, and does not let you in even with IE until the browser's advanced security property "Enable Integrated Windows Authentication" is off.