How To Configure Microsoft SCCM to Use HTTPS/PKI
Overview
This guide is also available on my personal blog: https://setupconfigmgr.com/how-to-configure-microsoft-sccm-to-use-https-pki
In this step-by-step guide, we will walk through the process of switching Microsoft SCCM from HTTP to HTTPS.
Video Guide
Topics in Video
- Install Active Directory Certificate Services - https://youtu.be/nChKKM9APAQ?t=30
- Create Certificate Templates for SCCM - https://youtu.be/nChKKM9APAQ?t=296
- Create Auto-Enroll GPO for the Client Certificate - https://youtu.be/nChKKM9APAQ?t=654
- Requesting the IIS and DP/OSD Certificate on the IIS Site System - https://youtu.be/nChKKM9APAQ?t=722
- Bind Requested Certificate to Site in IIS for Default and WSUS Website - https://youtu.be/nChKKM9APAQ?t=961
- Configure WSUS to Require SSL - https://youtu.be/nChKKM9APAQ?t=1056
- Configure DP, MP, and SUP to use SSL - https://youtu.be/nChKKM9APAQ?t=1176
- Verify Client Received Client Certificate and SCCM Client Changes to SSL - https://youtu.be/nChKKM9APAQ?t=1715
Microsoft Docs for Topics in this Guide:
- Active Directory Certificate Service Components- https://www.rebeladmin.com/2018/05/active-directory-certificate-service-components/
- How PKI Works - https://www.rebeladmin.com/2018/05/how-pki-works/
- How to Configure the WSUS Web Site to Use SSL - https://technet.microsoft.com/en-us/library/bb633246.aspx
- Install the Certification Authority - /en-us/windows-server/networking/core-network-guide/cncg/server-certs/install-the-certification-authority
- PKI certificate requirements for System Center Configuration Manager - /en-us/sccm/core/plan-design/network/pki-certificate-requirements
- PKI Deployment Models - https://www.rebeladmin.com/2018/05/pki-deployment-models/
- Step-by-step example deployment of the PKI certificates for System Center Configuration Manager: Windows Server 2008 certification authority - /en-us/sccm/core/plan-design/network/example-deployment-of-pki-certificates