2.4 Health Registration Authority (HRA) Settings

NAP HRAs are divided into groups that use the same certificate security settings specified in section 2.3.3. The HRA groups are represented in the registry as depicted in the following figure.

Health certificate server (hcs) groups registry representation

Figure 2: Health certificate server (hcs) groups registry representation

The NAP HRA settings are compounded from multiple registry entries that MUST be represented in the machine-specific Registry Policy file as follows:

Key: Software\Policies\Microsoft\NetworkAccessProtection\ClientConfig\Enroll\HcsGroups\<Server-Group>

<Server-Group> is the name of the HRAs group.