Shift from Certificate Management to Credential Management
Windows uses Kerberos to authenticate machines and users; in this system, machine credentials are cryptographically random passwords—essentially secret keys—similar to those used in encryption protocols. These credentials are automatically changed every 30 days by default