I have many remote offices connected with Pix501 and 506 with Lan-to-LAn tunnels to a Concentrator 3000. We are migrating to AD and currently the PIXs have a domain name configured as domainame.com but I need to change it to domainame.local which will be the new AD domain name. Per Cisco's instruction when changing the domain name you will have to delete the RSA KEY and delete related certificates. Will I be able to do this remotely or will generating a new RSA key drop my connection which i may not be able to re-connect. Anyone have experience with this or changing the domain name with PIX for AD? Thanks in advance.