# FEATURES AND LIMITATIONS #

• Uses the VpnService API featured by Android 4+. Devices by some manufacturers seem to lack support for this - Secure Tactical VPN Client won't work on these devices!


• Uses the IKEv2 key exchange protocol (IKEv1 is not supported)


• Uses IPsec for data traffic (L2TP is not supported)


• Full support for changed connectivity and mobility through MOBIKE (or reauthentication)


• Combined RSA/ECDSA and EAP authentication is supported by using two authentication rounds as defined in RFC 4739


• VPN server certificates are verified against the CA certificates pre-installed or installed by the user on the system. The CA or server certificates used to authenticate the server can also be imported directly into the app.


• IKEv2 fragmentation is supported if the VPN server supports it.


• VPN profiles may be imported from files.