Hi, trying to run a IKEv2 VPN connection on Native Windows 11 Client vs FortiGate. Im almost at the point I want it to be, FortiClient works fine but who knows how long will this free 7.4.3 last. I would like to have an alternative like Windows Built in client, but from what I gatherded it has a very specific flaw. When I connect with forticlient peer identification goes like

reveived peer identifier DER_ASN1_DN - this has in CN the name I want my settings in fortigate to validate users certificate name vs given eap-mschapv2 credentials using in fortigate cert-peer-username-validation option.

Windows client on the other hand goes like:

peer identifier IPV4_ADDR 192.168.1.1

I have found very little how to change that, one thing keeps repeating to add to registry ExtendedIDiSupport key in RasMan folder (ikev2 or Parameters, added to both), but this doesnt seem to change, Im still getting the ipv4_addr instead of ID_FQDN.

Is there any other option to change this, or what am im missing that this regeeddit…