MIM certificate management (CM) can be used in many ways, but to show you a little bit about how we can use its basics, The Financial Company will use it to allow managers (such as Jeff) to issue smart cards to users (such as David) with the help from the Modern App. We will also configure autoenrollment for EFS certificates using the policy module to recap the accounts being used in this setup.
Before we can do anything, we need to extend the Active Directory schema to support MIM CM. We will go over multiforest configurations later in this chapter under various scenarios.
If we don't, the configuration wizard will stop and tell us to extend the Active Directory schema if we try to run it. As you can see in the following screenshot, the installer is reminiscent of the branding transition:
