Certificate registration point

This role gives us the ability to provision client certification to managed devices, such as an Apple Mac, and mobile devices using Configuration Manager. This component is quite a specific role and would not usually be implemented in a typical Configuration Manager deployment. That said, certain organizations may well have a specific requirement for this to be installed, so in that case we should know how to work with the role and maintain functionality in case of a problem.

This Configuration Manager role acts as a go-between for a device such as an Apple Mac or mobile device to communicate with a Network Device Enrollment Service (NDES) in order to utilize the widely used Simple Certificate Enrollment Protocol (SCEP). The acronym for this should not be confused with the endpoint protection feature of Configuration Manager as they are very different things. The certificate registration point is another web application that runs from IIS and, as always, the...