As an admin in a mixed environment, the biggest bane of my existence it trying to issue internal certs. Right now the only option is using NDES/SCEP, but Microsoft apparently has no interest in supporting that since it can't support their CNG certificate providers, which means the only certificates I can issue to linux machines via NDES/SCEP is ones using older cryptography. Not to mention that setting that up in Windows still often results in crashing the Windows crypto Schannel module and all kinds of nastiness because managing it requires IE and older libraries etc...
Now that Ubuntu is adding some tighter integration with AD targeting SQL Sever and the like, certainly being able to automatically enroll the machine and programs like SQL Server for AD issued certificates has to be a consideration. I haven't been able to find any mention of anything to do with certificates around this.
Are there any threads, docs, or other information on this out there?
