I configured a Windows CA and created a certificate template to issue certificates with ECDH_P384 keys:
Then I noticed that it's not possible to set the "Key Encipherment" key usage in the "Extensions" tab:
What is the reason behind this limitation?
Is it correct to say that the "Key Encipherment" key usage makes no sense when using ECDH since it's already a key agreement protocol?