Browse by Tags

Most customers who want to manage Mac computers using System Center 2012 Configuration Manager SP1 will use the enrollment tool, CMEnroll. This tool allows users with an Active Directory account to install the Configuration Manager client and automatically request and install the required client PKI...

[ Yvette O’Meally has provided today’s post] When the Configuration Manager 2007 Asset Intelligence synchronization point first connects to System Center Online, it presents the System Center online authentication certificate to enroll in the service. This is a public certificate that...

[Today's post is provided by Chaohao Xu .] If Windows hotfix KB974571 is installed on a Windows 7 reference image, then it is highly likely that you would see the following log entries in smsts.log when deploying this image to an existing client. Notice that because the client certificates were not...

[Today's post comes from Carol Bailey ] I'm really pleased to be able to announce a recent publication from the Certificate Services documentation team that will help our customers running Configuration Manager in native mode: How to Request a Certificate With a Custom Subject Alternative Name . ...

[ Carol Bailey has contributed today's post] A couple of issues recently came to our attention from the TechNet forums with regard to native mode certificate selection when there is more than one available certificate that could be used: When a certificate in the certificate store has expired...

[ Carol Bailey has updated her previous post "How to Publish the CRL on a Separate Web Server"] We've recently updated our blog post for publishing the CRL on a separate Web server because the instructions were missing the variable <DeltaCRLAllowed> in the paths, which is needed for delta CRLs...

[Today's post is provided by Carol Bailey ] I sometimes get questions from customers about values to set for the key sizes and validity periods for the certificates required for native mode and out of band management in Configuration Manager. This has been a tough one for me to answer, because in...

[Today's post is provided by Carol Bailey ] By default, an issuing enterprise CA publishes its certificate revocation list (CRL) to locations within the forest. When you are using Internet-based client management with Configuration Manager, there are scenarios where you might need to publish the CRL...

[Today's post is provided by Carol Bailey ] I've openly admitted that I don't find the command-line utility, Certreq.exe, the easiest of the Certificate Services methods to use when it comes to deploying certificates for Configuration Manager native mode. But to some extent I made my peace with Certreq...

[Today's post is provided by Carol Bailey ] With the December documentation update for the Configuration Manager library, we posted a new step-by-step guide for out of band management, to help customers deploy the PKI certificates with a Windows Server 2008 CA ( http://technet.microsoft.com/en-us...

[Today's post is brought to you by Carol Bailey ] Have you tried to renew the existing site server signing certificate for a native mode site, and wondered how to do this without creating a new certificate? This post provides a procedure to do this that is suitable for when the site server is on either...

[Today's post is brought to you by Carol Bailey ] I'm going to share some information about an option on the Certificate Services advanced Web enrollment page, because I couldn't find it documented anywhere and it took me a long time to work it out. However, even though I'm explaining how to use this...

[Today's post is contributed by Carol Bailey ] A number of certificate deployment issues I see are down to timing issues. Like other distributed systems with many moving parts, Microsoft Certificate Services often requires more time and patience to do its job than administrators are prepared to give...

[Today's post is contributed by Carol Bailey ] We've seen this question come up a few times, and the simple answer is no - as long as the communicating computers have a trust in common, and the correct certificates are used, native mode works just fine. This trust in common can use a single certification...

[Today's post comes from Carol Bailey ] Many companies do not currently have their own public key infrastructure (PKI) with an issuing Certification Authority (CA) but still want to benefit from native mode and Internet-based client management - which has a dependency on PKI certificates. So a natural...