The option to request that clients send a statement of health (SoH) cannot be enabled because the public key of the certificate ...

The option to request that clients send a statement of health (SoH) cannot be enabled because the public key of the certificate contains an object identifier (also known as OID) of 2.5.29.15, but does not support the Extended Key Usage (EKU) for encryption. To ensure that requests can be made for Remote Desktop clients to send an SoH, if the certificate that you plan to use contains an OID of 2.5.29.15, you must ensure that one of the following key usage values for this certificate is set: (1) CERT_KEY_ENCIPHERMENT_KEY_USAGE (2) CERT_KEY_AGREEMENT_KEY_USAGE (3) CERT_DATA_ENCIPHERMENT_KEY_USAGE. For more information, see the Help topic "Obtain a certificate for the RD Gateway server."