Explanation: When VPN is configured on a NBM server that is not a non-certificate authority, the server certificate creation takes some time. If a certificate is not created within a few minutes, the VPN Configuration snap-in reports that it is unable to create TRO.
Action: If this happens, wait for a few minutes, then save the changes for VPN Server again. By then the server certificate should be available.