Should site-to-site service stop on deletion of a VPN trusted root object from the TRC?

Explanation:  When the trusted root object, which is used by the VPN member configuration gets deleted, the VPN member configuration is not consistent anymore, and hence the setup will stop working. Before deleting a TRO, please ensure that the TRO is not referenced by any member entry in the VPN site to site configuration.

Action:  If you have already deleted a TRO which was referenced, and the setup is not working anymore, do the following:

  1. Delete the corresponding VPN Site-to-Site member entry which was using the TRO previously.
  2. Recreate the VPN site-to-site member entry.