Configure PKI for on-premises MDM

- [Instructor] We created a certificate authority…in a previous video.…Now we need to create and distribute our new…mobile device management certificates for enrollment.…We're in our domain controller…and we're going to open up the Certification Authority…from the Tools menu in Server Manager.…By default, the Certification Authority uses…LDAP base certification revocation list, or CRLs,…and that allows connections for domain joined devices.…We must add HTT based CRLs to the certification authority…to make it possible for non-domain joined devices…to be trusted with certificate issues…from the Certification Authority.…

So if we have a non-domain joined device,…we can still push out software to that particular device.…A perfect example of that would be an android phone…or tablet.…Let's go ahead and right click on our…Certification Authority server, and we'll go to Properties.…Let's go ahead and click on the Extensions tab,…and now let's choose the HTTP as you see right here…with the ServerDNSName.…You see some new options show up underneath.…