Basic Machine Cert inspection in APM Policy

I would make the following adjustments to the Machine Cert Auth agent:

Certificate Store Name: MY

Certificate Store Location - LocalMachine

CA Profile - it should be a SSL certificate authority profile that contains a CA cert (or bundle of CA certs) that can validate the machine cert. This profile is created in the GUI under Local Traffic - Profiles - SSL - Certificate Authority

OCSP Responder - none

Certificate Match Rule - any (for now)

Save Certificate in a Session Variable - enabled

Allow UAC right elevation prompts - yes