Pocket PC 2003 (Premium Edition) and Windows Mobile 5.0 ship with a built-in L2TP/IPsec client (the VPN clients mentioned below support IPsec without L2TP). For details, see Jacco de Leeuw's article, Using Openswan with Pocket PC 2003 and Windows Mobile 5.0. This built-in L2TP/IPsec client supports both preshared keys and certificates. According to Microsoft, Pocket PC only supports certificates that are obtained through 'web enrollment' (which would dictate the use of a Windows Certificate Server). But with a utility called P12imprt you can also import a PKCS#12 file from any CA (and not just Microsoft's) to the Pocket PC.