While trying to establish a persistent (permanent) connectivity mode in Kerio VPN client, the connection needs to be disconnected. It might the case the expired SSL certificate, which is used for securing users through Kerio Control VPN, needs to be replaced.
"Persistent connection" checkbox will be greyed out unless you enable "Save password" option.
This article provides explanations about the necessary permission rights and UI settings presented in Kerio VPN client for Windows and Mac.
It is required to re-establish the connection for Kerio VPN client users when a certificate changed in the VPN interface settings.
When a persistent mode is enabled, the connection is closed and the SSL fingerprint doesn't match unless you disconnect and connect again to the VPN to import the certificate.
When configuring the Kerio Control VPN client, the option to enable the Persistent Connection can only be enabled with administrator rights, therefore, it's only possible to disable it with the same rights. Even if you install manually the certificate in the user's computer, the Kerio VPN Client will not be able to establish a connection.