You Need to Know : How to use System Center 2012 R2 Configuration Manager to build Company Resource Access Solution

    Hi All :

    Company Resource Access in System Center 2012 R2 Configuration Manager provides a set of tools and resources that enable you to give users in your organization access to data and applications from remote locations.

    Certificate profiles in System Center 2012 R2 Configuration Manager works with Active Directory Certificate Services and the Network Device Enrollment Service role to provision authentication certificates for managed devices so that users can seamlessly access company resources. For example, you can create and deploy certificate profiles to provide the necessary certificates for users to initiate VPN and wireless connections.

    Certificate profiles in Configuration Manager provide the following management capabilities:

  • Certificate enrollment and renewal from an enterprise certification authority (CA) for devices that run iOS, Windows 8.1, Windows RT 8.1, and Android, These certificates can then be used for Wi-Fi and VPN connections.

  • Deployment of trusted root CA certificates and intermediate CA certificates to configure a chain of trust on devices for VPN and Wi-Fi connections when server authentication is required.

  • Monitor and report about the installed certificates.

     Certificate profiles can automatically configure user devices so that company resources such as Wi-Fi networks and VPN servers can be accessed without having to install certificates manually or use an out of band process. Certificate profiles can also help to keep company resources secure because you can use more secure settings that are supported by your enterprise public key infrastructure (PKI). For example, you can require server authentication for all Wi-Fi and VPN connections because you have provisioned the required certificates on the managed devices.

     This document will to show you how to build and configure Certificate Profiles and NDES.

     Please use Adobe Reader X or above version to open.


     Justin Gao

     Microsoft (China)

SC2012R2 CM Company Resource Access Operation Document.pdf