Windows Server® 2012 Unleashed

Monitoring Non-Domain Member Considerations

DMZ, workgroup, and nontrusted domain agents require special configuration; in particular, they require certificates to establish mutual authentication. Operations Manager 2012 requires mutual authentication, that is, the server authenticates to the client and the client authenticates to the server, to ensure that the monitoring communications are not hacked. Without mutual authentication, it is possible for a hacker to execute a man-in-the-middle attack and impersonate either the client or the server. Thus, mutual authentication is a security measure designed to protect clients, servers, and sensitive Active Directory domain information, which is exposed to potential hacking attempts by the all-powerful ...