Help me with SCEP certificate strong mapping
Having read through KB5014754, as well as numerous other pages regarding the implementation of strong mapping, I'm still no closer to getting this to work and would appreciate some help/input.
I'm trying to make the switch from weak mapping to strong mapping utilising the SID extension, however authentication fails when I change CertificateMappingMethods to 0x18.
I receive the following error on my DCs;
Event ID: 39
Message: The Key Distribution Center (KDC) encountered a user certificate that was valid but could not be mapped to a user in a strong way (such as via explicit mapping, key trust mapping, or a SID).
If I change CertificateMappingMethods to either 0x0004 or 0x1F then I am able to authenticate (changing on all 3 DCs)
I can confirm that the users SID is visible within the certificate, and the SID matches the AD user.