Remote MP and DP logs
Question
Team, please help me with below scenarios. Thank you.
1- If we are configuring remote mp and dp what are the logs we need to check from “site server” and “remote MP dp server”
2– Also if distribution of package fails with remote dp what logs we need to check in “remote dp server”
3. Pls guide me on how to setup CA server and PKI infrastructure. Is there any post on this.
Answers ( 6 )
It depends on the design and requirement, how many layers of cert chain need to be created however By installing the Certification Authority role service of Active Directory Certificate Services (AD CS), you can configure your Windows server to act as a CA
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831574(v=ws.11)#:~:text=By%20installing%20the%20Certification%20Authority,to%20act%20as%20a%20CA.
If you use the same ADCS as CA and for issuing also then you can start looking at defining the templates for issuing / enrolling certificates
Couple of ref link
https://www.windows-noob.com/forums/topic/16300-how-can-i-configure-system-center-configuration-manager-in-https-mode-pki-part-1/
https://abouconde.com/2018/11/05/install-and-configure-pki-for-sccm-2016/
Hi Guru
I have setup CA server by using below link provided
https://docs.microsoft.com/en-us/windows-server/networking/core-network-guide/cncg/server-certs/install-the-certification-authority#:~:text=In%20Select%20Server%20Roles%2C%20in,information%2C%20and%20then%20click%20Next
Now root ca is setup I believe
Do we need to setup issuing ca
Can you help me with next step to build pki infrastructure
Yes, for setting up PKI infra you need CA server. You can go with Microsoft CA server itself.
In Server Manager -> Manage-> Add Roles and Features
Active Directory Certificate Services
https://docs.microsoft.com/en-us/windows-server/networking/core-network-guide/cncg/server-certs/install-the-certification-authority#:~:text=In%20Select%20Server%20Roles%2C%20in,information%2C%20and%20then%20click%20Next.
For setting up pki infra we need to setup CA server. Am I right ?
Hi,
1- If we are configuring remote mp and dp what are the logs we need to check from “site server” and “remote MP dp server”
Karthik –
MP -> MPSetup.log, MPMSI.log and MPControl.log
DP – DistMgr.log
2– Also if distribution of package fails with remote dp what logs we need to check in “remote dp server”
Karthik –
DP – DistMgr.log
3. Pls guide me on how to setup CA server and PKI infrastructure. Is there any post on this.
Karthik – Sorry no depth idea. Generally CA certificate can be given by certificate team. i know how to configure PKI infra using that certificate.
Thanks
Karthikeyan
Can you help me in setting up pki infra for my lab.