certificate mapping

Certificate mapping on Windows domain controllers refers to the process of linking a certificate to a user or computer account for authentication. A notable incident occurred with Microsoft's May 2022 cumulative update KB5013943, which introduced a certificate-mapping change that broke certificate-based authentication on domain controllers. This disruption affected Network Policy Server (NPS), RADIUS, RRAS, and EAP/PEAP authentication flows, forcing administrators to find workarounds until Microsoft released out-of-band fixes. The issue highlights the critical role certificate mapping plays in enterprise authentication and the potential impact of updates on such configurations.