Installing Edge Component Monitoring Certificates

Monitoring the Edge Server role requires an install of certificate-based mutual authentication. This process has several steps, but is straightforward. To install and configure certificates to enable the Edge Transport servers to use mutual authentication, complete the following five major tasks:

1. Create a Certificate Template to issue the correct format of X.509 certificates for Operations Manager to use for mutual authentication.

2. Request the Root CA certificate to trust the CA and the certificates it issues. This is done for each Edge Transport server and possibly for the management servers if not using an enterprise CA.

3. Request a certificate from the Root CA to use for mutual authentication. This is done for each Edge Transport server and for each management server.

4. Install the Operations Manager agent manually. This is done for each Edge Transport server.

5. Configure the agent to use the certificate. This is done for each Edge Transport server and for each management server.

These various X.509 certificates are issued from a certificate authority.