You can use certificates as an alternative to the Kerberos protocol for mutual authentication and encryption between an agent and either a gateway server, management server, or root management server, or between a gateway server and either a management server or root management server.
Operations Manager 2007 includes a utility, MOMCertImport, that configures Operations Manager 2007 to use a certificate. For more information, see How to Import Certificates in Operations Manager 2007.
When you obtain and install certificates for use with Operations Manager 2007, consider the following:
- Certificates used on various components in
Operations Manager 2007 (for example, agent, gateway server,
management server, or root management server) must be issued by the
same certification authority (CA).
- Each computer requires its own unique
- Each computer must also contain the root
certification authority certificate in its Trusted Root
Certification Authorities store and any intermediate certification
authorities in the Intermediate Certification Authorities
- The Subject Name field for the certificate
must contain the DNS fully qualified domain name (FQDN) of the host
- The certificates need to support the
following two extended key usage fields, server authentication and
client authentication, which are represented by the two OIDs
126.96.36.199.188.8.131.52.1 and 184.108.40.206.220.127.116.11.2.
Note When entering OIDs, separate each OID by a comma. For example, enter 18.104.22.168.22.214.171.124.1,126.96.36.199.188.8.131.52.2 exactly as shown.
The basic order of operations for installing a certificate is as follows:
- Obtain the certificate for each Operations Manager role.
- Use the MOMCertImport tool specifying the certificate in the
For more information, see the Operations Manager 2007 Security Guide at http://go.microsoft.com/fwlink/?LinkId=64017.
TasksHow to Create a Certificate in an Enterprise CA for Operations Manager 2007
How to Create a Certificate in a Stand-Alone CA for Operations Manager 2007
How to Import a CA Certificate for Use with Operations Manager 2007
How to Import Certificates in Operations Manager 2007
How to Remove a Certificate that was Imported with the MOMCertImport Tool in Operations Manager 2007
ConceptsAbout Gateway Server in Operations Manager 2007
Mutual Authentication in Operations Manager 2007
Other ResourcesAbout Security in Operations Manager 2007
Security Considerations in Operations Manager 2007
Did you find this information useful? Please send your suggestions and comments about the documentation.