Monthly Archives: January 2009

Implementing a dedicated CA/PKI for SCMDM

System Center Mobile Device Manager 2008 is a demanding product to install in your infrastructure. You need to be able to work out firewalls, routing, and the usual things, but in addition you need a CA to issue certificates. There are a couple of possible responses from customers and system integrators to this requirement;
- “No biggie. I’ll just install a new CA, and hit next-next-next in the wizard.”
- “How do we integrate it with our current PKI infrastructure?”
- “Sounds complicated. Do I have to install a bunch of servers just to get certificates for some mobile devices?”

(…)

In this post I will be trying to build a CA dedicated for usage in an SCMDM scenario, and restricting it to only work for this purpose.

SCMDM – Multiple Instance Deployment – Part 3

And moving to the “wrapping up phase” of this installation we have just one final step to cover, which is getting a Gateway Server in place. There are two dependencies you need to get in place before you can start the install however.

The multi-instance feature requires the Gateway Server to have knowledge of the specific instance it belongs to. The Gateway Server is not a member of Active Directory, and thus cannot learn anything from the instance information there. You will need to supply this information in an xml-file, which you can either create yourself, or more preferably create on the Device Management Server and transfer to the GW Server.

Part 3 of 3

SCMDM – Multiple Instance Deployment – Part 2

We’ll run quickly through the process of installing the server roles, as this has been covered previously and hasn’t changed all that much.

Remember to install the following components on your server before proceeding:
- WSUS 3.0 SP1
- PowerShell
- MBCA
- Report Viewer Redistributable

(…)

Part 2 of 3

RSS for Posts RSS for Comments