38 lines
1.5 KiB
Markdown
38 lines
1.5 KiB
Markdown
# Toolchain
|
|
|
|
## Development host
|
|
|
|
- Windows 11 with Hyper-V.
|
|
- Visual Studio 2026 with `.vsconfig` workloads.
|
|
- .NET SDK 10.0.400 or a compatible later 10.0 feature band.
|
|
- Windows 11 SDK 10.0.28000.
|
|
- MSVC x64/x86 tools, CMake, Ninja, WinDbg, Git, and PowerShell 7/Windows PowerShell.
|
|
|
|
The SGU additions are C#, but the repository keeps the upstream native/COM
|
|
interop source and benefits from the full Windows desktop toolchain.
|
|
|
|
## Windows Server target
|
|
|
|
The broker is published self-contained for `win-x64`. It requires:
|
|
|
|
- Windows Server 2025 or supported Windows Server with AD management APIs.
|
|
- An HTTPS server certificate in `LocalMachine\My`.
|
|
- Trusted and allow-listed client certificates.
|
|
- Delegated AD rights for `OU=Usuarios-SGU` and its managed child OUs.
|
|
- Network access to the configured HTTPS NTLM endpoint.
|
|
|
|
## Windows client target
|
|
|
|
- Windows 10 22H2 for the lab; Windows 11 is the production target.
|
|
- Latest .NET 10 x64 runtime. Managed COM hosting cannot be self-contained.
|
|
- Client certificate with non-exportable private key in `LocalMachine\My`.
|
|
- Trust for the broker certificate or issuing CA.
|
|
- Domain membership and DNS resolution for the broker.
|
|
|
|
No Visual Studio, compiler, SDK, PowerShell module, or source tree is required on
|
|
the target client.
|
|
|
|
For an isolated target, download the current `Microsoft.DotNet.Runtime.10`
|
|
offline installer on the development host, verify its publisher/signature, stage
|
|
it with the provider, and pass its path to `Install-CredentialProvider.ps1`.
|