Do we need ConfigMgr Client Certificate if there is a computer certificate?
-
Tuesday, January 24, 2012 6:43 AM
This may have discussed before but just want to double-check.
In our environment every computer obtains a "computer" certificate when it joins the domain.
I noticed that a certificate template named ConfigMgr Client Certificate has been created but none of the computers actually gets a certificate of it.
It seems to me once there is a "computer" certificate there is no need to have another certificate of "ConfigMgr Client Certificate".
Is this right?
- Moved by Torsten [MVP]MVP Tuesday, January 24, 2012 9:19 AM moved to IBCM subforum (From:Configuration Manager Setup/Deployment)
All Replies
-
Tuesday, January 24, 2012 7:56 AM
are you using native mode? If NOT, SCCM / configmgr client installation will take care of configmgr certificates...
Anoop C Nair - @anoopmannur
MY BLOG: http://anoopmannur.wordpress.com
User Group: ConfigMgr Professionals
This posting is provided AS-IS with no warranties/guarantees and confers no rights.
-
Tuesday, January 24, 2012 9:13 AMYes, I was talking about native mode.
-
Tuesday, January 24, 2012 9:19 AM The certificate requirements are listed here: http://technet.microsoft.com/en-us/library/bb680733.aspx. Double check if your computer certificates meet the requirements listed.
Torsten Meringer | http://www.mssccmfaq.de- Marked As Answer by Carol BaileyMicrosoft Employee, Moderator Tuesday, January 24, 2012 1:54 PM
-
Tuesday, January 24, 2012 9:19 AM
Yes, I was talking about native mode.
Then I think, this more security / PKI related issue rather than configmgr!! Have you tried posting this in server secuirty forums http://social.technet.microsoft.com/Forums/en-US/winserversecurity/threadsAnoop C Nair - @anoopmannur
MY BLOG: http://anoopmannur.wordpress.com
User Group: ConfigMgr Professionals
This posting is provided AS-IS with no warranties/guarantees and confers no rights.
.png)
