Remote MP and DP logs

Question

Team, please help me with below scenarios. Thank you.

1- If we are configuring remote mp and dp what are the logs we need to check from “site server” and “remote MP dp server”

2– Also if distribution of package fails with remote dp what logs we need to check in “remote dp server”

3. Pls guide me on how to setup CA server and PKI infrastructure. Is there any post on this.

 

solved 0
ram kumar 2020-06-14T15:59:29+05:30 6 Answers 160 views Beginner
0

Answers ( 6 )

  2. Guru Vaidya
    1
    2020-06-17T09:59:24+05:30
    Reply

    It depends on the design and requirement, how many layers of cert chain need to be created however By installing the Certification Authority role service of Active Directory Certificate Services (AD CS), you can configure your Windows server to act as a CA

    https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831574(v=ws.11)#:~:text=By%20installing%20the%20Certification%20Authority,to%20act%20as%20a%20CA.

    If you use the same ADCS as CA and for issuing also then you can start looking at defining the templates for issuing / enrolling certificates

    Couple of ref link
    https://www.windows-noob.com/forums/topic/16300-how-can-i-configure-system-center-configuration-manager-in-https-mode-pki-part-1/

    https://abouconde.com/2018/11/05/install-and-configure-pki-for-sccm-2016/

    Best answer
  4. ram kumar
    0
    2020-06-17T04:05:01+05:30
    Reply

    Hi Guru
    I have setup CA server by using below link provided

    https://docs.microsoft.com/en-us/windows-server/networking/core-network-guide/cncg/server-certs/install-the-certification-authority#:~:text=In%20Select%20Server%20Roles%2C%20in,information%2C%20and%20then%20click%20Next

    Now root ca is setup I believe
    Do we need to setup issuing ca
    Can you help me with next step to build pki infrastructure

  6. Guru Vaidya
    1
    2020-06-15T06:16:10+05:30
    Reply

    Yes, for setting up PKI infra you need CA server. You can go with Microsoft CA server itself.

    In Server Manager -> Manage-> Add Roles and Features
    Active Directory Certificate Services

    https://docs.microsoft.com/en-us/windows-server/networking/core-network-guide/cncg/server-certs/install-the-certification-authority#:~:text=In%20Select%20Server%20Roles%2C%20in,information%2C%20and%20then%20click%20Next.

  8. ram kumar
    0
    2020-06-14T18:44:37+05:30
    Reply

    For setting up pki infra we need to setup CA server. Am I right ?

  10. Karthikeyan
    1
    2020-06-14T17:17:20+05:30
    Reply

    Hi,

    1- If we are configuring remote mp and dp what are the logs we need to check from “site server” and “remote MP dp server”
    Karthik –
    MP -> MPSetup.log, MPMSI.log and MPControl.log
    DP – DistMgr.log

    2– Also if distribution of package fails with remote dp what logs we need to check in “remote dp server”
    Karthik –
    DP – DistMgr.log

    3. Pls guide me on how to setup CA server and PKI infrastructure. Is there any post on this.
    Karthik – Sorry no depth idea. Generally CA certificate can be given by certificate team. i know how to configure PKI infra using that certificate.

    Thanks
    Karthikeyan

Leave an answer

Sorry, you do not have permission to answer to this question .