SCCM Deployment with HTTPS Protocol in Cross-Forest Environment
Question
Hi All,
I want to implement SCCM in an environment consisting two AD forests (Windows Server 2016). Both forest are having two way trust relationship established between them. For convenance I will call them Forest A and Forest B. In forest A we have Enterprise CA server and Forest B do not have any CA server. I want to install SCCM in Forest A and CA Server will issue required certificate templates. The clients which are member of forest A will get the required certificates. However challenge is to enroll certificates to the clients in forest B. I have found following Microsoft documentation for cross-forest certificate enrolment guide, https://learn.microsoft.com/en-us/archive/technet-wiki/14715.test-lab-guide-mini-module-cross-forest-certificate-enrollment-using-certificate-enrollment-web-services . However this guide talks about the process of enrolling the Web Server Certificate where as in SCCM implementation scenario, I will require auto-enrollment of Client Certificate for Windows computer for SCCM client installation. I have created the lab based on the above mentioned documentation (including SCCM lab) to test this deployment before going for production. However I am not sure how I can enroll Client Certificate for Windows computer for clients in Forest B. The following guide talks about the certificate consolidation. https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/ff955845(v=ws.10). However this guide is for Windows Server 2008 and not for the Windows server 2016. Please do let me know If anybody is having any input here. Thanks in Advance !
Leave an answer