How To Configure Microsoft SCCM to Use HTTPS/PKI

2018-05-29

Overview

This guide is also available on my personal blog: https://setupconfigmgr.com/how-to-configure-microsoft-sccm-to-use-https-pki

In this step-by-step guide, we will walk through the process of switching Microsoft SCCM from HTTP to HTTPS.

Video Guide

Topics in Video

Install Active Directory Certificate Services - https://youtu.be/nChKKM9APAQ?t=30
Create Certificate Templates for SCCM - https://youtu.be/nChKKM9APAQ?t=296
Create Auto-Enroll GPO for the Client Certificate - https://youtu.be/nChKKM9APAQ?t=654
Requesting the IIS and DP/OSD Certificate on the IIS Site System - https://youtu.be/nChKKM9APAQ?t=722
Bind Requested Certificate to Site in IIS for Default and WSUS Website - https://youtu.be/nChKKM9APAQ?t=961
Configure WSUS to Require SSL - https://youtu.be/nChKKM9APAQ?t=1056
Configure DP, MP, and SUP to use SSL - https://youtu.be/nChKKM9APAQ?t=1176
Verify Client Received Client Certificate and SCCM Client Changes to SSL - https://youtu.be/nChKKM9APAQ?t=1715

Microsoft Docs for Topics in this Guide:

Active Directory Certificate Service Components- https://www.rebeladmin.com/2018/05/active-directory-certificate-service-components/
How PKI Works - https://www.rebeladmin.com/2018/05/how-pki-works/
How to Configure the WSUS Web Site to Use SSL - https://technet.microsoft.com/en-us/library/bb633246.aspx
Install the Certification Authority - /en-us/windows-server/networking/core-network-guide/cncg/server-certs/install-the-certification-authority
PKI certificate requirements for System Center Configuration Manager - /en-us/sccm/core/plan-design/network/pki-certificate-requirements
PKI Deployment Models - https://www.rebeladmin.com/2018/05/pki-deployment-models/
Step-by-step example deployment of the PKI certificates for System Center Configuration Manager: Windows Server 2008 certification authority - /en-us/sccm/core/plan-design/network/example-deployment-of-pki-certificates