Deploying an Active Directory Enterprise Root CA

This example details the steps required to deploy an Enterprise Root CA in the Company ABC domain. When an Enterprise Root CA is configured, all clients in the domain automatically trust certificates issued from this CA.

All Configuration Manager Site Servers and managed clients must trust the Certificate Authority. Any Configuration Manager Site Servers or managed clients that don’t trust this Certificate Authority will not communicate with the infrastructure and might become orphaned. This typically happens when non–domain member servers, such as bastion hosts in the demilitarized zone (DMZ), are not part of the domain but have a Configuration Manager agent installed. To correct this problem, ...

Get Microsoft® System Center 2012 Unleashed now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.