Administration

Table 5‑6. Registry Keys for Configuring True SSO on the Enrollment Server
Registry Key
Min &
Max Type Description
ConnectToDomains
N/A REG_MULTI
_SZ
List of domains the enrollment server attempts to connect to
automatically. For this multi-string registry type, the DNS fully
qualified domain name (FQDN) of each domain is listed on its
own line.
The default is to trust all domains.
ExcludeDomains
N/A REG_MULTI
_SZ
List of domains the enrollment server does not connect to
automatically. If the connection server provides a configuration
set with any of the domains, the enrollment server will attempt
to connect to that domain or domains. For this multi-string
registry type, the DNS FQDN of each domain is listed on its
own line.
The default is to exclude no domains.
ConnectToDomainsInForest
N/A REG_SZ Specifies whether to connect to and use all domains in the
forest that the enrollment server is a member of. The default is
TRUE.
Use one of the following values:
n
0 means false; do not connect to the domains of the forest
being used.
n
!=0 means true.
ConnectToTrustingDomains
N/A REG_SZ Specifies whether to connect to explicitly trusting/incoming
domains. The default is TRUE.
Use one of the following values:
n
0 means false; do not connect to explicitly
trusting/incoming domains.
n
!=0 means true.
PreferLocalCa
N/A REG_SZ Specifies whether to prefer the locally installed CA, if available,
for performance benefits. If set to TRUE, the enrollment server
will send requests to the local CA. If the connection to the local
CA fails, the enrollment server will try to send certificates
requests to alternate CAs. The default is FALSE.
Use one of the following values:
n
0 means false.
n
!=0 means true.
MaxSubmitRetryTime
9500-
59000
DWORD Amount of time to wait before retrying to submit a certificate
signing request, in milliseconds. The default is 25000.
View Administration
VMware, Inc. 107