Choices are:
import a certificate file from the pfsense system.
authenticate with the pfsense server.
revoke a certificate from the pfsense server certificate authority (ca).
add a route to the connecting ip address of the ipsec firewall.
Answer: import a certificate file from the pfsense system.