PKI Certificate with .corp domain?!

[SuperTom100]

Hi All,

Our active directory domain is setup with a .corp suffix e.g. company.corp (stupid i know).

The problem is when we go to any certificate vendor, example Godaddy or Comodo, they will not issue a certificate for a .corp domain. 

We can generate one for our TLD (.com) but we cannot change DHCP option 15 to our TLD (.com) , as that will break lots of stuff (Linux machines for example). 

Is there any DNS magic we can use to work around this? Or are we screwed and are going to have to visit each machine manually with a USB stick and upload an internally generated certificate?

Thanks, 

[vij1]

Hello SuperTom100,

It is possible to distribute internally generated certificates manually to each machine, but this process can be automated to minimize effort and ensure consistency. Tools like Ansible, Puppet, or Chef can help streamline the deployment process across your network.

Best regards,

Vijay N.

Intel Customer Support

[SuperTom100]

Hi Vijay,

Is there a guide on how to achieve this please? We have SCCM.

I thought we had to manually put the cert onto a usb stick and boot into bios to achieve this?

Thanks

[vij1]

Hello SuperTom100,

Yes, you are correct. To achieve this, you will need to manually place the certificate onto a USB stick and boot into the BIOS to complete the process.

If you need any further assistance or guidance, feel free to reach out.

Best regards,

Vijay N.

[vij1]

Hello SuperTom100,

Greetings!

If further assistance is necessary, do not hesitate to reply.

Regards,

Vijay N.