25.3 Setting Up Windows Workstations to Use SSL and Certificates

This section includes information about setting up a Windows 98/NT/2000/XP workstation to use SSL and security certificates. The following sections are included:

25.3.1 Importing a Certificate on the Windows Workstation

If the SSL certificate you want to use was issued by a CA that is not in the trusted root list, you need to install the self-signed certificate from the CA on the workstation. This enables the workstation to trust any certificate issued by the CA. You can do this either before or after you install the Desktop Management Agent.

It is possible to import a certificate on the Windows workstation in a User Account, in a Computer Account and in a Service Account. For additional information about importing a certificate, see “To Import a Certificate” at the Windows XP Professional Product Documentation Web site.

25.3.2 Configuring the Desktop Management Agent to Query for the Certificate

When the Desktop Management Agent installation program requires an entry for the IP address or DNS name of the Middle Tier Server, you need to enter the common name you used when you created the Certificate Request. For more information, see Step 5.f.