In troubleshooting an unrelated issue, I learned a lot about Certificate Revocation Lists (CRLs) and how they can impact ConfigMgr and specifically Operating System Deployment (OSD).  I first thought that my problem was the CRL, which would have caused me some pain, but it wasn’t the problem after all.  Below are a couple of great links that I found about CRLs and ConfigMgr.  In short, if you want to deploy a PKI, to support ConfigMgr or otherwise, learn about CRLs and CRL publishing first.  Published CRL locations are very difficult to change once you start issuing certificates so it is imperative that you get them right the first time.

Tips, Tricks & Hints for Native Mode and Internet-Based Client Management – Part 3 of 3

Planning your CRL Distribution Point for Configmgr 2007 Native mode