#JAMF PRO ACTIVE DIRECTORY PRO#

Jamf Pro authenticates to the JamfAD CS Connector server with a client certificate, and then the AD CS Connector contacts the Microsoft CA over DCOM to request the certificate. The following diagram illustrates how communication flows between Jamf Pro and AD CS if the Jamf AD CS connector is hosted in the DMZ. Jamf Cloud with Jamf AD CS Connector in the DMZ The following diagrams illustrate some common implementations of the Jamf ADCS Connector. Jamf Pro uses the Jamf AD CS Connector to communicate with AD CS to obtain certificates.

In addition, the Jamf AD CS Connector supports the use of multiple templates whereas an NDES server uses a single AD CS certificate template. The main differences are that the Jamf AD CS Connector requires a client certificate to authenticate connections rather than a challenge password. The process is similar to the one used by Microsoft's NDES (SCEP) Server role in that both services create secure web front-ends to AD CS. Only Jamf Pro will have the client certificate needed to authenticate to the service. Devices never connect directly to the connector, so firewall rules can be used to restrict access.

After the certificate is ready, it is returned to Jamf Pro to be re-packed for distribution to a managed device. Jamf Pro then sends the request number back to AD CS via the Jamf ADCS Connector to check if the completed certificate has been generated. After a request is received from Jamf Pro, the connector converts the web request to Microsoft's native DCOM protocol, passes it to your AD CS server, and then returns the AD CS's certificate request number. The connector is a SSL-secured web application that receives client certificate requests through Jamf Pro and runs using Microsoft's IIS web server.

AD CS can then be used as a certificate authority (CA) for issuing certificates to computers and mobile devices via configuration profiles. The Jamf AD CS Connector allows you to add Active Directory Certificate Services (AD CS) as a PKI Provider in Jamf Pro.

Jamf pro active directory