HSPD-12 Logical Access Authentication and Microsoft Active ...

A smart card user’s domain controller’s Trusted Root Certification Authorities store must contain the smart card’s root trust point certificate (i.e. Common Policy) and have one of the EKU settings as described in the X.509 Key Usage and Enhanced Key Usage Fields section of this document. ................
................