Saturday, May 12, 2012 4:40 AM
certificates required by MP in native mode
- Moved by Matthew Hudson [MVP]MVP Sunday, May 13, 2012 3:29 PM (From:Configuration Manager 2007 General)
Saturday, May 12, 2012 5:10 AMHi, this may help:
Saturday, May 12, 2012 12:12 PM
Yes, if you are using Native Mode then yo0u require certificate
Monday, May 14, 2012 2:11 AM
There are three type of certificates required for SCCM native mode. Take a look at the following table about where they are required.
Site server signing certificate
This certificate is installed on the server that will be the Configuration Manager 2007 site server. It is used to sign client policies.
Web server certificate
This certificate is installed on servers that will be Configuration Manager 2007 site systems, with roles such as the management point and distribution point. It is used to encrypt data and authenticate the server to clients.
This certificate is installed on computers that will be Configuration Manager 2007 clients, and on the management point. It is used to authenticate the client to site systems, and on the management point it is used to monitor the server's health.
For details, the following site systems require Web server certificates when a Configuration Manager 2007 site is configured for native mode:
- Management points (default management point, proxy management point, network load balanced management point, and Internet-based management point)
- Standard distribution points (servers and shares) that are configured with the option Allow clients to transfer content from this distribution point using BITS, HTTP, and HTTPS (required for device clients and Internet-based clients).
- Software update points
- State migration points
Also about how to deploy certificates, take a look at following technet documents:
Hope this will help.
- Marked As Answer by Carol BaileyMicrosoft Employee, Moderator Saturday, May 19, 2012 4:10 PM