See below for details on the CSP Certificate Enrollment Gateway support for MS-WSTEP.

MS-WSTEP version supported by CSP Certificate Enrollment Gateway

CSP Certificate Enrollment Gateway supports the 12.0+ version of the MS-WSTEP protocol described at:

https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-wstep/4766a85d-0d18-4fa1-a51f-e5cb98b752ea

MS-WSTEP requests supported by CSP Certificate Enrollment Gateway

CSP Certificate Enrollment Gateway supports the following MS-WSTEP types. 

MS-WSTEP domain enrollments supported by CSP Certificate Enrollment Gateway

CSP Certificate Enrollment Gateway supports the following MS-WSTEP domain enrollments.

• Domain and Sub-domain enrollments
• Read-Only Domain Controllers,
• Multiple Domains in the same Active Directory Forest and across trust-established forests.
• Cross Forest support across established trusts between the forests. 

Windows products supported for MS-WSTEP enrollment with CSP Certificate Enrollment Gateway

The CSP Certificate Enrollment Gateway support for MS-WSTEP enrollment has been tested in the following Windows products.

Load balancer support for MS-WSTEP enrollment with CSP Certificate Enrollment Gateway

MS-WSTEP enrollment with CSP Certificate Enrollment Gateway supports high availability with the following load-balancing layers.