ike authentication credentials are unacceptable

[agitech]

Hello

There is a main office network (192.168.10.1/24) connected to the Internet and has a real IP. Users in the office LAN have access to the Internet.

What I need is a VPN for out LAN users to access the office LAN. The PCs in the office LAN are Windows PCs. PCs that need access are also Windows PCs

I set up IPSec VPN on opnsense office gateway using these instructions:

https://docs.opnsense.org/manual/how-tos/ipsec-swanctl-rw-ikev2-eap-mschapv2.html
https://docs.opnsense.org/manual/how-tos/ipsec-rw-w7.html

(I used 1 method - Shared IP pool for all roadwarriors)

when I import CA certificate (not server) to Trusted Root Certification Authorities
I download it from System->Trust->Certification Authorities (PEM format)
then I import it to TRCA on target Windows (win 11) machine (second instruction)

and when I try to connect I get message

ike authentication credentials are unacceptable

please tell me what could be the problem