You can use certificates as an alternative to the Kerberos protocol for mutual authentication. Certificates provide encryption between an agent and either a gateway server, management server, or root management server, or between a gateway server and either a management server or root management server.
Use the MOMCertImport tool to import and configure certificates on all Operations Manager roles, including the agent.
To import certificates
-
Log on to the computer with an account that is a member of the Administrators group.
-
On the Windows desktop, click Start, and then click Run.
-
In the Run dialog box, type cmd and then click OK.
-
At the command prompt, type <drive_letter>: (where <drive_letter> is the drive where the Operations Manager 2007 installation media is located) and then press ENTER.
-
Type cd\SupportTools\i386 and then press ENTER.
Note On 64-bit computers, type cd\SupportTools\amd64. -
Type MOMCertImport and then press ENTER.
-
In the Select Certificate dialog box, click the certificate you want to import and then click OK.
See Also
Tasks
How to Create a Certificate in an Enterprise CA for Operations Manager 2007How to Create a Certificate in a Stand-Alone CA for Operations Manager 2007
How to Import a CA Certificate for Use with Operations Manager 2007
How to Remove a Certificate that was Imported with the MOMCertImport Tool in Operations Manager 2007
Concepts
Certificates in Operations Manager 2007Mutual Authentication in Operations Manager 2007
Other Resources
About Security in Operations Manager 2007Security Considerations in Operations Manager 2007
Did you find this information useful? Please send your suggestions and comments about the documentation.