Tech Community Live: Endpoint Manager edition
Jul 21 2022, 08:00 AM - 12:00 PM (PDT)

Introducing support for Cryptography: Next Generation (CNG) certificates in Configuration Manager

%3CLINGO-SUB%20id%3D%22lingo-sub-122900%22%20slang%3D%22en-US%22%3EIntroducing%20support%20for%20Cryptography%3A%20Next%20Generation%20(CNG)%20certificates%20in%20Configuration%20Manager%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-122900%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EWe%20have%20added%20limited%20support%20for%20Cryptography%3A%20Next%20Generation%20(CNG)%20certificates%20in%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fcloudblogs.microsoft.com%2Fenterprisemobility%2F%3Fp%3D67111%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EUpdate%201710%20for%20System%20Center%20Configuration%20Manager%20Technical%20Preview%3C%2FA%3E%3CSPAN%3E.%20Now%20Configuration%20Manager%20clients%20can%20use%20PKI%20client%20authentication%20certificate%20with%20private%20key%20in%20CNG%20Key%20Storage%20Provider%20(KSP).%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EWith%20KSP%20support%2C%20Configuration%20Manager%20clients%20can%20now%20support%20hardware-based%20private%20key%20such%20as%20TPM%20KSP%20for%20PKI%20client%20authentication%20certificate.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Slide1.PNG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F23268i1454F41347948EA1%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Slide1.PNG%22%20alt%3D%22Slide1.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3ERead%20about%20it%20in%20the%20%3CA%20href%3D%22https%3A%2F%2Fcloudblogs.microsoft.com%2Fenterprisemobility%2F2017%2F10%2F30%2Fintroducing-support-for-cryptography-next-generation-cng-certificates-in-configuration-manager%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EEnterprise%20Mobility%20and%20Security%20blog%3C%2FA%3E.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-122900%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECM%20technical%20preview%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Community Manager

We have added limited support for Cryptography: Next Generation (CNG) certificates in Update 1710 for System Center Configuration Manager Technical Preview. Now Configuration Manager clients can use PKI client authentication certificate with private key in CNG Key Storage Provider (KSP).

 

With KSP support, Configuration Manager clients can now support hardware-based private key such as TPM KSP for PKI client authentication certificate.

 

Slide1.PNG

 

Read about it in the Enterprise Mobility and Security blog.

0 Replies