SCOM Certificates use the FQDN of the target server as the subject Name and are delivered to Computer Personal Stores. The certs are client and server (OID: 1.3.6.1.5.5.7.3.1, 1.3.6.1.5.5.7.3.2) as per normal.
All fine and dandy however, we encountered a problem today that another application, which also uses certs from the personal store, picked up the SCOM certificate in preference to the cert issued by its local CA - very bad Q: Can a new store be used instead of Computer Personal Store Q: Can we use something other than the FQDN in the subject name of the SCOM certificate. Q: Does the original cert have to remain in the computer personal store after MOMCERTIMPORT (think the answer is yes) Peter Hakesley | Monitoring & Automation Technical Lead Engineer, Data Centre Services t: +44(0)845 155 6556 ext: 4006 e: [email protected] | w: www.scc.com<http://www.scc.com/> a: SCC, CV1, Cole Valley, 20 Westwood Avenue, Tyseley, Birmingham B11 3RZ
