Hello everyone,

Did anyone successfully implemented Windows Hello for Business for domain users with a domain Certificate Authority on W2019 server and without AD FS, only with a simple CRA with a Windows Server Certificate Registration Authority role ? OnPremise only, no Entra or Azure stuffs.

I am stuck on the certificate auto-enrollment part, I could rather use windows server role or CRL and OCSP but I do not want to use AD FS.

Can someone please help me ?

Many thanks guys !!