You can use digital certificates in place of preshared keys for IKE negotiations. For more information about IKE, see IKE Overview in Configuring IPSec.