Hi Team, I want some guidence in configuring SCCM sites with required 3 type of certificates i.e. site server, web server, client (pushed through GP). I have single forest with 2 domains with (2 way trust) and one CA. Domain A CA with template created for SCCM site system, web server & Client computers Parent SCCM site in native mode Domain B: Child SCCM (for Domain A SCCM parent) I have no issues in getting certificates in Domain A since CA is available here but not able to get the web certificate & clients certificates for my Child SCCM in domain B. If i go to mmc->certificates->Personal->request new certificate..i don't see any option to request web certificate. Any suggestion to get the web certificate and client certificates in domain B would be appreciated. Just wondering if i need to export and install the certificate in Domain B from domain A? Thanks Regards, Ms Expert

You do not need to export .... Make sure the certificate templates have Read and Enroll permissions for the computers in domain B. If you don't already have a security group that contains these computers and is accessible from domain A, create one.