Microsoft has updated it’s OEM guidance for using Device Guard and Credential Guard. There is no changelog, hopefully you have an old copy of this web page cached somewhere for you to manually diff… https://msdn.microsoft.com/en-us/windows/hardware/commercialize/design/minimum/device-guard-and-credential-guard