How To Configure Microsoft SCCM to Use HTTPS/PKI

Overview

This guide is also available on my personal blog:  https://setupconfigmgr.com/how-to-configure-microsoft-sccm-to-use-https-pki

In this step-by-step guide, we will walk through the process of switching Microsoft SCCM from HTTP to HTTPS.

Video Guide

Topics in Video

• Install Active Directory Certificate Services - https://youtu.be/nChKKM9APAQ?t=30
• Create Certificate Templates for SCCM - https://youtu.be/nChKKM9APAQ?t=296
• Create Auto-Enroll GPO for the Client Certificate - https://youtu.be/nChKKM9APAQ?t=654
• Requesting the IIS and DP/OSD Certificate on the IIS Site System - https://youtu.be/nChKKM9APAQ?t=722
• Bind Requested Certificate to Site in IIS for Default and WSUS Website - https://youtu.be/nChKKM9APAQ?t=961
• Configure WSUS to Require SSL - https://youtu.be/nChKKM9APAQ?t=1056
• Configure DP, MP, and SUP to use SSL - https://youtu.be/nChKKM9APAQ?t=1176
• Verify Client Received Client Certificate and SCCM Client Changes to SSL - https://youtu.be/nChKKM9APAQ?t=1715

Microsoft Docs for Topics in this Guide:

• Active Directory Certificate Service Components- https://www.rebeladmin.com/2018/05/active-directory-certificate-service-components/
• How PKI Works - https://www.rebeladmin.com/2018/05/how-pki-works/
• How to Configure the WSUS Web Site to Use SSL - https://technet.microsoft.com/en-us/library/bb633246.aspx
• Install the Certification Authority - /en-us/windows-server/networking/core-network-guide/cncg/server-certs/install-the-certification-authority
• PKI certificate requirements for System Center Configuration Manager - /en-us/sccm/core/plan-design/network/pki-certificate-requirements
• PKI Deployment Models - https://www.rebeladmin.com/2018/05/pki-deployment-models/
• Step-by-step example deployment of the PKI certificates for System Center Configuration Manager: Windows Server 2008 certification authority - /en-us/sccm/core/plan-design/network/example-deployment-of-pki-certificates