Installation and configuration

MIM certificate management (CM) can be used in many ways, but to show you a little bit about how we can use its basics, The Financial Company will use it to allow managers (such as Jeff) to issue smart cards to users (such as David) with the help from the Modern App. We will also configure autoenrollment for EFS certificates using the policy module to recap the accounts being used in this setup.

Extending the schema

Before we can do anything, we need to extend the Active Directory schema to support MIM CM. We will go over multiforest configurations later in this chapter under various scenarios.

Note

All schema changes in Active Directory should be planned carefully.

If we don't, the configuration wizard will stop and tell us to extend the Active Directory schema if we try to run it. As you can see in the following screenshot, the installer is reminiscent of the branding transition:

Note

Remember that all modifications to the schema require the schema admin's permissions...