Jamf and ADCS for Machine based certs

[KyleEricson]

See my attached guide. Hope it helps.

[arubatim]

Great doc!

Two suggestions
1) Don't allow the private key to be exported
2) Include the SPN as a SAN (SPN is more machine centric than UPN)

[dgreening]

Awesome! Can you link to a downloadable PDF of this?

[KyleEricson]

See if this works.
PDF Download

[bmarks]

Pardon my ignorance, but does this require binding to AD? Or, does this work even without binding?

[KyleEricson]

Unfortunately, this requires AD Binding AirWatch allows this which I put in a feature request for this Here please vote this up.