Ok, so I got the 10.3 version of VaporSec and made it past the authentication screen, but now what?

I have added a connection and saved it, but at the bottom it says “racoon is not running”. Is this going to be started by VaporSec automatically or do I need to start that manually myself?

Also, I would rather like to use X.509 certificates instead of a shared secret. How do I generate a certificate?

any hints appreciated, thanks
benjk