To begin configuring your Configuration Manager site to start using secure communication, you will require a CER file of your root CA. The file you export must be a DER X.509 certificate.

In the administration workspace, expand the site configuration node and select Sites. Right-click on your site and then select Properties. In the Client Computer Communication tab, you have the ability to set options on how clients communicate with your site.

Import your root CA certificate by clicking on Set at the bottom of the window. You can import multiple root certificates if required. This functionality supports environments that may have multiple certificate authorities.

The certificates you specify here will be used to verify the certificate chain of any certificates configured in the hierarchy. You are recommended to make sure that your clients are properly communicating with a HTTP management point and distribution point as well as software update point before setting...