Join Domain - request AD computer cert - no MAC Server!

Question

Hello,
I was able to join MAC Lion systems to the domain using the .mobileconfig file and now that I have upgraded to Mountain Lion I am trying to find the proper way to join these systems.  It looks like there is a nice easy method, but that appears to require Mountain Lion server.
Does anyone know how ot request a cert for a Mountain Lion system from a MS CA for a domain certificate?
The article I found only seems to Mountain Lion server:  http://support.apple.com/kb/HT5357
I don't see any profile/payload manager on the Mountain Lion macbook pro, so is this doc only good for servers?

Answer 1

Here is what I found helpful:
802.1x EAP-TLS Machine Authentication in Mt. Lion with AD Certificates
http://www.afp548.com/2012/11/20/802-1x-eaptls-machine-auth-mtlion-adcerts/
How to request a certificate from a Microsoft Certificate Authority using DCE/RPC and the Active Directory Certificate profile payload:
http://support.apple.com/kb/HT5357
I tripped up here becase my CA was named differently than the computer name.  If you open a command prompt on the windows CA and type the command certutil –cainfo you should see several peices of information that will make filling out The name of the CA straight forward.  You should use the Sanitized CA short name (DS name) for The name of the CA:
and certutil –cainfo will clearly show you that value.
One other thing to pay close attension to is you should use the Template name and not the Template display name for the Certificate Template field.  These can be different (see below).
Good luck!