You have a number of Hyper-V hosts which are either members of untrusted domains or are in workgroups, and you want to enable Hyper-V Replica for VMs on those hosts. You may not have an internal CA hierarchy; you may want to use certificates with much longer lifetimes. Microsoft supports