--- orig/ikecert.1m.txt	Tue Oct 31 14:25:23 2006
+++ new/ikecert.1m.txt	Tue Oct 31 14:26:38 2006
@@ -903,9 +903,8 @@
          -D "CN=mycert, O=Sun, C=US" \
          -S -1d2h -F "01/22/2007 12:00:00"
 
-     As in.iked(1M) can run only in the global zone and reference
-     only  the  global  zone's  public key certificate databases,
-     ikecert will only be useful in the global zone.
+     As in.iked can run in the global zone and exclusive-IP zones,
+     this command is not useful in shared-IP zones.