Configuring Windows Event Forwarding with Non Domain Computers

[heatguy1986]

I have 2 Windows Server 2016 servers. One will act as a collector and the other will be the forwarder. I'm following a MS guide here on how to configure source initiated subscription with WEF with non domain computers.

In the link, I'm following the steps in the section Setting up a source initiated subscription where the event sources are not in the same domain as the event collector computer.

In this section it mentions the following:

Certificates requirements

• A server authentication certificate has to be installed on the Event Collector computer in the Personal store of the Local machine. The subject of this certificate has to match the FQDN of the collector.
  
• A client authentication certificate has to be installed on the Event Source computers in the Personal store of the Local machine. The subject of this certificate has to match the FQDN of the computer.

I did some digging and I found a guide on how to set up a CSR here but I believe I'm not following the right guide as I have not worked with certs up till this point.

I have found guides here and here but nothing that describes how to perform the steps in the *Certificates requirement* mentioned in the MS doc above.

Can anyone help me in how to perform the steps in the Certificates requirements section of the doc?


Migell E. Roberts

Continue reading...