Supported certificate types Secure Hash Algorithm 2 (SHA-2) certificates How to enable Transport Layer Security (TLS) 1.2 Step-by-step example deployment of the PKI certificates for Configuration Manager: Windows Server 2008 Certification AuthorityĪctive Directory Certificate Services Overview Only an enterprise certification authority (CA) that runs on the Enterprise or Datacenter editions of Windows server can use template-based certificates.įor more information, see the following articles: Use the Microsoft certificate template reference in the sections below to identify the certificate template that most closely matches the certificate requirements. When you use Active Directory Certificate Services and certificate templates, this Microsoft PKI solution can ease the management of certificates. For client certificates that Configuration Manager enrolls on mobile devices and Mac computers, they require use of Active Directory Certificate Services. You can use any PKI to create, deploy, and manage most certificates in Configuration Manager. This information assumes basic knowledge of PKI certificates. The public key infrastructure (PKI) certificates that you might require for Configuration Manager are listed in the following tables. Applies to: Configuration Manager (current branch)