I see some feature Reqs and items on this but nothing specific. We would like Jamf to request a subordinate CA certificate from our MS CA internally so it would issue device certs from itself but integrated in our Tier 3 PKI. Is this possible? Seem like it should ... Any advice or documentation appreciated. Thanks
Question
Add JAMF as issuing CA from our internal MS ADCS CA
+1
Well @bentoms has done some work here. https://macmule.com/2015/09/06/osx-ad-certificate-requests-some-tips/
+9I don't believe that there is a way to actually make the JSS an intermediate CA. Depending on what you mean by "device certificates", you might still be able to accomplish the task in a different way.
If you want your MDM enrollment certificates to be issued by your MS CA, refer to Integrating With an External CA.
If you want to request device certificates from an MS CA for other purposes (e.g. 802.1x network authentication), refer to the link that @franton provided. Additionally, I provided some tips on another post which you might find helpful.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.