certificates required by MP in native mode

Monday, May 14, 2012 2:11 AM

Hi Harry,

There are three type of certificates required for SCCM native mode. Take a look at the following table about where they are required.

Certificate Requirement	Certificate Description
Site server signing certificate	This certificate is installed on the server that will be the Configuration Manager 2007 site server. It is used to sign client policies.
Web server certificate	This certificate is installed on servers that will be Configuration Manager 2007 site systems, with roles such as the management point and distribution point. It is used to encrypt data and authenticate the server to clients.
Client certificate	This certificate is installed on computers that will be Configuration Manager 2007 clients, and on the management point. It is used to authenticate the client to site systems, and on the management point it is used to monitor the server's health.

For details, the following site systems require Web server certificates when a Configuration Manager 2007 site is configured for native mode:

Management points (default management point, proxy management point, network load balanced management point, and Internet-based management point)
Standard distribution points (servers and shares) that are configured with the option Allow clients to transfer content from this distribution point using BITS, HTTP, and HTTPS (required for device clients and Internet-based clients).
Software update points
State migration points

Also about how to deploy certificates, take a look at following technet documents:

Hope this will help.

Thanks

Marked As Answer by Carol BaileyMicrosoft Employee, Moderator Saturday, May 19, 2012 4:10 PM