Update hello-hybrid-key-trust-prereqs.md

This commit is contained in:
Orlando Rodriguez
2019-05-27 18:44:04 -05:00
committed by GitHub
parent 3aa10bc150
commit 49064c416e

View File

@ -63,7 +63,7 @@ The minimum required enterprise certificate authority that can be used with Wind
* The certificate must have a Certificate Revocation List (CRL) distribution point extension that points to a valid CRL.
* Optionally, the certificate Subject section should contain the directory path of the server object (the distinguished name).
* The certificate Key Usage section must contain Digital Signature and Key Encipherment.
* Optionally, the certificate Basic Constraints section should contain:
* Optionally, the certificate Basic Constraints section should contain: [Subject Type=End Entity, Path Length Constraint=None].
* The certificate Enhanced Key Usage section must contain Client Authentication (1.3.6.1.5.5.7.3.2) and Server Authentication (1.3.6.1.5.5.7.3.1).
* The certificate Subject Alternative Name section must contain the Domain Name System (DNS) name.
* The certificate template must have an extension that has the BMP data value "DomainController".