2.4.1 PKCS#10 Certificate Settings

  • Article

The health certificate enrollment agent (HCEA) MUST be configured with the required security parameters to construct the Public Key Cryptography Standards (PKCS) #10 certificate request, as specified in [MS-HCEP] section 2.2.1.4.

These security parameters are configured in the NAP Group Policy. If the IPsec enforcement client is enabled, as specified in section 2.3, the security parameters entries MUST be represented in the machine-specific Registry Policy file as follows:

Key:  Software\Policies\Microsoft\NetworkAccessProtection\ClientConfig\ Enroll\HcsGroups\<Server-Group>

Security parameter values follow in sections 2.4.1.1 through 2.4.1.6.