Is there any documentation that specifically talks about setting up a site system in a non trusted domain with management point and distribution point and communication using HTTPS.

I see some examples but none of them talk about the certificates that are required on the DP and MP in the non trusted site s

There's no difference. Certs and cert trust have nothing to do with AD domains. The certs or more specifically the CA that issued the certs must be trusted, but that's also no different and can be done manually or via a group policy in that untrusted domain.

Hi Jason,

I am stumped (and not a certificate guru) and not sure how to get certs based on the Config Manager Web Server template and Config Manager Distribution Client Template into the machine (Secondary MP/DP) that is in the untrusted domain.   I hear you about the untrusted domain part not making a difference.   Our secondary MP/DP in the untrusted domain does have the root certificate in the trust root store.

I have tried MMC certificates, certreq and have tried to go directly to the CA (https://caserver/certsrv) but in neither case do the Config Manager Distribution Client nor Config Manager Web Server templates show up.

Conversely in the domain that the CA Server resides,  I can request both of these certs in the MMC certificate plugin.

I am certain I am missing something.

We used this technet document to setup the certificate templates, etc.

http://technet.microsoft.com/en-us/library/gg682023.aspx

Yes, I know this is an old post, but Im trying to clean them up. Did you solve this problem, if so what was the solution?

Since no one has answer this post, I recommend opening  a support case with Microsoft Customer Support Services (CSS) as they can work with you to solve this problem.