Ssl mbam

Hi I would like to know the steps to be followed to configure Microsoft’s BitLocker Administration and Monitoring (MBAM) with Secure Network Communication?

[Pathak]

MBAM can encode the correspondence between the MBAM Recovery and Hardware Database, the Administration and Monitoring servers and the MBAM customers. On the off chance that you choose to scramble the correspondence, you are requested that select the confirmation power provisioned testament that will be utilized for encryption.

The channel between MBAM Administration and Monitoring Server and SQL SSRS can likewise be scrambled. An Administrator needs a testament endorsed from CA (Certificate Authority) or a Self-Signed Certificate before conveying MBAM.

Step 1: Encrypt Channel between MBAM Client and Administration and Monitoring Server.

Utilizing Self Signed Certificate.

Associate with Server where MBAM Administration and Monitoring Role will be introduced.

Ensure you have introduced IIS.

Open Server Manager and Click on Roles.

Select webserver and snap on IIS.

In Feature View, Double Click Server Certificates.

Under Actions Pane, Select Self-Signed Certificate.

On the Create Self-Signed Certificate page, sort a cordial name for the testament in the Specify a well disposed name for the endorsement box, and after that snap OK.

Utilizing Certificate Approved by Certificate Authority

There are 2 approaches to import an endorsement

Demand or Import a declaration from a CA utilizing IIS:

Demand an Internet Server Certificate in IIS

Import a Server Certificate in IIS

Demand or Import a declaration into the Personal Certificate Store utilizing Certificate Manager:

Declaration Templates to be utilized:

MBAM Client to MBAM Administration and Monitoring Server: Use Standard Web Server Template.

After you have declaration prepared, when you execute MBAM Setup, we will demonstrat to you the thumbprint of the testament in "Design Network Communication Security" wizard for MBAM Setup.







Please find further steps attached in the below file;