Supported Certificate Types & Backends for SC backend only.

SCM supports adding the extension for client and device certificates with the Sectigo Private CA backend only. It is NOT supported with Sectigo Public CA backend.

If you are using certificate auth to Windows domain controllers, please contact support to request the new extension enabled on your private CA template.

Note: No action needed by customers after MS Agent 3.10 is released.  Sectigo will need to update the new extension and enable it on your private CA template.  Please contact support to initiate the request.

Please refer to the Microsoft knowledge article below:

https://support.microsoft.com/en-us/topic/kb5014754-certificate-based-authentication-changes-on-windows-domain-controllers-ad2c23b0-15d8-4340-a468-4d4f3b188f16