ab#76170

Author: leefine02

docsource/content.md

@@ -12,6 +12,12 @@ managed is achieved via either an `SSH` (for Linux and possibly Windows orchestr
 orchestrated servers) connection. When acting as an agent, `SSH/WinRM` may still be used, OR the certificate store can be
 configured to bypass these and instead directly access the orchestrator server's file system.
 
+RemoteFile Management and Inventory capabilities support the handling of certificates with RSA, ECC, and ML-DSA ditital signature algorithms.  However, 
+ODKG (On Device Key Generation) introduced in release 3.0 for store types RFJKS, RFPEM, RFPkcs12, and RFDER, currently only supports
+RSA and ECC.  Also, please be aware that the CSR and key pairs generated by the RemoteFile Orchestrator extension when utilizing
+the ODKG capability are technically created on the orchestrator server itself and not the target device if the orchestrator is
+managing a store or stores on separate servers than where the Universal Orchestrator is installed.
+
 ![](images/orchestrator-agent.png)
 
 The supported configurations of Universal Orchestrator hosts and managed orchestrated servers are detailed below: