Securing Server Communication

The HTTPS option available for several site roles is only used to secure client communications. To secure server communications, several options exist. First, enable the option to require secure key exchange between sites. This is a default setting for new Configuration Manager implementations and is significantly simplified when the Active Directory schema has been extended. When the Configuration Manager schema extensions have been implemented, the secure key exchange between Site Server happens automatically with the help of Active Directory. The Site Server key allows data, such as the site control files, to be signed.

IPSec can be implemented to encrypt server-to-server communication. This offers a very high ...

Get Microsoft® System Center 2012 Unleashed now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.