Have you looked at How to import UCS root CA on Windows clients
That is also not hard requirement. The domain can be configured since the last update.
Have you looked at How to import UCS root CA on Windows clients
That is also not hard requirement. The domain can be configured since the last update.