2.4.1 PKCS#10 Certificate Settings
The health certificate enrollment agent (HCEA) MUST be configured with the required security parameters to construct the Public Key Cryptography Standards (PKCS) #10 certificate request, as specified in [MS-HCEP] section 184.108.40.206.
These security parameters are configured in the NAP Group Policy. If the IPsec enforcement client is enabled, as specified in section 2.3, the security parameters entries MUST be represented in the machine-specific Registry Policy file as follows:
Key: Software\Policies\Microsoft\NetworkAccessProtection\ClientConfig\ Enroll\HcsGroups\<Server-Group>