System information
30
Deploying Parallels Mac Management for Microsoft SCCM 2012
4 In the template list, locate Workstation Authentication, right-click it and then click Duplicate
Template in the context menu.
5 In the Duplicate Template dialog, choose Windows Server 2003 Enterprise and click OK.
6 The Properties of New Template dialog opens.
7 On the General page, choose and type the template name (e.g. PMM Client Certificate).
8 On the Request Handling tab page, set Minimum key size to 2048 and select the Allow
private key to be exported option.
9 On the Subject Name tab page, select the Supply in the request option. The Certificate
Templates message box will pop. Click OK to close it.
10 On the Subject Name tab page, select Use subject information from existing certificates
for autoenrollment renewal requests option.
11 On the Extension tab page, make sure that Client Authentication is displayed in the
Description of Application Policies list. If it's not, add it.
12 On the Security tab page, add the computer running Parallels Configuration Manager Proxy
and the user account under which the Proxy is running. Grant them Enroll and Autoenroll
permissions. If the Proxy user account is LocalSystem then you only need to add the computer
name.
13 Click OK to close the Properties of New Template dialog.
14 In the Certification Authority window, right-click Certificate Templates and click New >
Certificate Templates to Issue.
15 In the Enable Certificate Templates dialog, select the
PMM Client Certificate template that
you've just created and click OK to enable it.
Creating Special Security Group
Create a dedicated security group and grant it the rights to request the certificates from
Certification Authority. The following users must be added to this group:
1 An administrator who will be installing and configuring the Parallels Configuration Manager
Proxy. This is needed because the Parallels Proxy configuration utility will request the certificate
for the Proxy.
2 A user whose account will be used to run the Parallels Configuration Manager Proxy. This is
needed because the Proxy will be requesting certificates for Macs.