According to the following link: https://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/215534-create-windows-ca-certificate-templates.html#anc10 The TVS certificate requires the checkAllow key ex...