Certificate configuration PKI for SCCM

SCCM certificate: copy the Web service template on CA and edit "Security"-give the Web computer account read and register permissions (copy of the web service template)

2, Distribution Point Certificate: copy the workstation authentication template on CA and edit "Security"-- give SCCM computer read and registration permissions, select the private key in "request processing" to export. (copy of workstation authentication template 1)

3, client auto-registration certificate: copy the workstation authentication template on CA and edit "Security" to give "Domain Computers" auto-enrollment rights (copy of workstation authentication template 2)

4. Post these three templates on CA

5. Open the MMC-- certificate on the SCCM computer-- computer certificate-- personal-- apply for a certificate-- select a copy of the Web service template, and add a DNS--sccm.eason.com-- request to get a WEB certificate.

6. Open the IIS manager of the SCCM computer and bind the WEB certificate you just applied for to IIS.

7. Open the MMC-- certificate on the SCCM computer-- computer certificate-- personal-- apply for a certificate-- Select "copy of workstation authentication template 1" to apply for a distribution point certificate and export this certificate to (distribution point certificate)

8. Establish an automatic certificate issuance policy on DC

9. Open SCCM on SCCM and set it to PKI mode: SCCM-- Distribution Point-- Properties-- HTTPS-- imports the distribution point certificate you just exported.

10. Site configuration-- role of server and site system-- SCCM server-- site system-- Properties-- check "specify the FQDN of this site system" (sccm.eason.com) and the following two options check the configuration.

-at this point, the PKI of SCCM has been configured-