RE: SCCM Client Certificate question..

Tech-Archive recommends: Speed Up your PC by fixing your registry


--
-----------------------
http://sms-hints-tricks.blogspot.com/


"Seth" wrote:

Hi,
I am deploying SCCM in native mode.
I created all necessart certificate templates. I configured autoenrollment
in group policy. Domain computers can receive certifcates successfully.
But,
I have computers all over the country which are not member of my AD domain
and which never come to my network. They are always on internet. I have to
manage them with SCCM. So they need to have computer certificate.. How can i
create certificates for them and how can i install these certificates with
minumum administrative effort.

I published my CA certsrv page, tried to get a certificate from a client but
in the certificate templates i can see only Basic EFS and User.. Which type
of certificate should i see and how?

Thank you.



.

Relevant Pages

  • Re: SCCM Client Certificate question..
    ... but they will need to access the Certificate Server. ... If you read my question and business requirements you will see that mixed mode is not for me. ... "The computers that are all over the country are not member of any domain. ...
    (microsoft.public.sms.admin)
  • Re: SCCM Client Certificate question..
    ... The cleint will check the certs with the server so it should be ok. ... Also don't i need to import the SCCM Server's Web server certificate to clients? ... If you read my question and business requirements you will see that mixed mode is not for me. ... "The computers that are all over the country are not member of any domain. ...
    (microsoft.public.sms.admin)
  • Re: Tests show that I dont understand how it works.
    ... > before, with stand alone computers, and was not able to make it work. ... > the Recovery Certificate does not include the private key. ... EFS is not Microsoft's finest moment. ... As you have found out making sure you can always decrypt it can ...
    (microsoft.public.windowsxp.security_admin)
  • Re: IAS with WorkGroup machines
    ... My IAS works all fine for domain computers with AD user accounts. ... received the CA's certificate, which was stored in the certificate stores ... To deploy PEAP-MS-CHAPv2 for wireless clients, you must issue server ...
    (microsoft.public.internet.radius)
  • Re: Enabling a Certificate template
    ... domain would require both the laptops certificate and the users domain login ... For the certification service to work in this way requires Server ... > You can mitigate that by removing authenticated users from the add ... Permissions for autoenrollment can also be given to computers. ...
    (microsoft.public.security)