This setting mitigates (e.g., CVE-2022-34691, CVE-2021-42287) where an attacker could impersonate another user via a certificate.
All certificates must have a strong mapping (e.g., a SID extension). Authentication is denied if strong mapping is missing. Important Deadlines strongcertificatebindingenforcement registry key
To deploy this security control safely, a phased approach is recommended: This setting mitigates (e
StrongCertificateBindingEnforcement
– Recommended for: