System Center 2012 Configuration Manager Unleashed

ConfigMgr Content Security

The integrity of the policy and content your clients receive is the paramount consideration when considering client-to-server communications. An attacker who could directly tamper with client policy could instruct the ConfigMgr agent to execute instructions of the attacker’s choosing. Similarly, an attacker who could cause clients to use forged or altered software packages, OS images, or other content could gain control of client systems. ConfigMgr uses cryptographic controls to protect against such attacks. You should also use appropriate settings and procedures to ensure policy and content integrity.

Security in Policy and Software Distribution

To protect against policy tampering, the site server signs all client ...