So how can i use vpro in intranet if i have FQDN of sccm like this sccm.moscow.mycompany.holding? Godaddy (or others) can't give me cert on this fqdn.
There are a few options available to you when using a local domain.
I know all of them (provision methods), but i want full automated one (cert from root CA).
May be there are some workarounds?
This methods, like entering hash, usb and host-based are good when you have a few computers. I have half thousand...
I understand your desire for a fully automated process for inserting your internally created certificate hash into the MEBx. However, due to security concerns automating this process is not an option.
That said, certain OEMs have been known to work with customers on a case by case basis. Creating a custom BIOS that would come pre-populated with your internally created certificate hash.