Setting Up a Domain Certificate for Configuration Manager in IIS with PKI Infrastructure. You may use this manual for creating a Configuration Manager certificate if you have PKI infrastructure (Active Directory Certification Services server role is deployed in your company domain).
1. Log into the server with “Internet Information Services” (IIS) (domain-joined PC). Click the “Start” button and find in the apps list “Internet Information Services” (IIS);
2. Select your server and go to “Server Certificates”;
I do the next actions on another Server with IIS Console.
3. Click “Create Domain Certificate“;
4. Fill in the fields (you must fill in all fields). Common name – enter your destination server FQDN. Click the “Next” button;
5. Click the “Select” button to select your Central Certification Server;
6. Select Certification Server and click the “OK” button;
7. Enter the “Friendly name” (FQDN) of your server (for which you make a certificate) and click the “Finish” button;
8. All good, we can export this certificate and use it as we wish, as it Domain Trusted Certificate;