Setting up certificate-based authentication

This recipe will cover how to set up the certificate-based authentication protection, which is also known as CBA.

Getting ready

To be able to configure certificate-based authentication protection for your workloads in your modern datacenter, you need to have a Certificate Authority (CA) role installed with a Clear Revocation List (CRL) that both servers can access. This recipe will not cover the installation and setup of a CA; read this article for guidance: http://technet.microsoft.com/en-us/library/cc731183.aspx.

How to do it…

The protection process to get started with certificate-based authentication is divided in five steps:

1. Create a DPM certificate template
2. Configure a certificate on the DPM server
3. Install the DPM agent
4. Configure a certificate on the protected server
5. Attach the DPM agent to the DPM server

First, you must configure a certificate template that you can reuse when creating certificates for certificate-based authentication protection...