In HTTP client mode, clients use self-signed (self-generated) certs for authentication and signing messages.
In HTTPS client mode, these are both valid also as well as transferring content (including policies) securely - this requires PKI generated certs. J From: [email protected] [mailto:[email protected]] On Behalf Of Paul J Melancon Sent: Wednesday, September 18, 2013 5:08 PM To: [email protected] Subject: [mssms] Can anyone explain if not in native mode what the Client Cert is for? I have been looking for the answers an maybe im just missing it, but what benefit does the Client Certificate give if you do not have a PKI and are running in HTTP mode on SCCM? Does it bring anything in the way of securing your connections? Is it for Internet Based Clients? I'm looking to eventually develop a CA and PKI, but I need to gather enough information to make a case on why a CA and PKI would benefit the structure of our organization. A lot of my coworkers just see it as an overly complicated process that will make figuring out problems harder on our Desktop Support group. Can anyone help me with information to present? Links, articles, etc... Paul

