This recipe will cover how to set up the certificate-based authentication protection, which is also known as CBA.
To be able to configure certificate-based authentication protection for your workloads in your modern datacenter, you need to have a Certificate Authority (CA) role installed with a Clear Revocation List (CRL) that both servers can access. This recipe will not cover the installation and setup of a CA; read this article for guidance: http://technet.microsoft.com/en-us/library/cc731183.aspx.
The protection process to get started with certificate-based authentication is divided in five steps:
Create a DPM certificate template
Configure a certificate on the DPM server
Install the DPM agent
Configure a certificate on the protected server
Attach the DPM agent to the DPM server
First, you must configure a certificate template that you can reuse when creating certificates for certificate-based authentication protection. It...