Skip to main content
Question

ACDS Connector Redundancy

  • November 16, 2020
  • 3 replies
  • 20 views

dlondon
Forum|alt.badge.img+14

Just wondering in anyone has figured a way to make a redundant ADCS Connector server?

3 replies

geoff_widdowson
Forum|alt.badge.img+8

@dlondon It has to be removed from the database. I had to put a call in with jamf to remove an old one from the PKI Certificates, as I am on Jamf Cloud, I don't have access the the db, although I would have put a call in anyway for help.


dlondon
Forum|alt.badge.img+14
  • Author
  • Honored Contributor
  • November 17, 2020

Hi @geoff.widdowson thanks but I'm not sure we are talking about the same thing. Because a certificate service is a critical item, my System Admin Manager asked if it was possible to have more than one ADCS Connector server pointed at ADCS in some sort of redundant way e.g. round robin and have that sit behind something like a load balancer e.g. F5. I suspect the answer is no because the Jamf Pro server needs to have the certificates from the ADCS Connector server.


Forum|alt.badge.img+5
  • Contributor
  • November 17, 2020

I haven't tried this but you could terminate on your load balancer. Or create custom certs and bind them to IIS on both ADCS connectors.
Would be interested in a "supported" method myself to be honest.