Using this switch parameter indicates that computer certificate authentication is to be disabled. Disabling this setting ...

Using this switch parameter indicates that computer certificate authentication is to be disabled. Disabling this setting disables PKI for the DirectAccess deployment

Following are conditions around computer certificate authentication
1. Computer certificate authentication cannot be disabled if health checks are enabled (HealthCheck parameter) or TwoFactor authentication is used for user authentication or when multisite deployment is enabled.
2. User authentication configuration is automatically changed to UserPasswd when computer certificate authentication is disabled.
Computer certificate authentication is re-enabled by configured an IPsec root certificate using the IPsecRootCertificate parameter.
Disabling of computer certificate authentication is a global configuration that applies to the entire DirectAccess deployment