Dear all.

How would you solve installing certificates on SCOM-agents on provisioned servers?

Our current plan is to pre-create certificates for all possible provisioned servers, put them in a folder, and use a startup-script to check FQDN, and use this to find the right certificate, and certimport it to SCOM + a restart of the agent.

Any thoughts welcome. Thank you.

automatic creation of certificates, moving them there and importing them is usually a bit difficult to automate. Major headache. there was a kind of solution with Advisor at the time (some while ago) and it did not get ported over to the SCOM itself to get this working a bit more simple.

I think pre-creating them and saviing them with fqdn name in the file name would make it possible for you to do this the way you stated.

Thank you, Bob, for confirming we're on the right path, given the possibilities available.