Log forwarding from a non-domain server certificate types

Question

I'm trying to set up a source initiated subscription (Log forwarding) where the event source server is not in the same domain as the event collector server. I'm following these steps:
https://msdn.microsoft.com/en-us/library/windows/desktop/bb870973(v=vs.85).aspx
It states that for this to work I need the following:
The collector computer should have a server authentication certificate (certificate with a server authentication purpose) in a
local computer certificate store.
And 
The source machine should have a client authentication certificate (certificate with a client authentication purpose) in a
local computer certificate store.
I'm looking to use a third party certificate authority to get the 2 above client and server certs. My question is what type of certificates will I need  for this to work? As there seem to be a lot of types and I am new to certs.

Answer 1

Hi Chard,
You can just request certificates from Computer Certificate Template. Certificate issued from Computer Certificate Template can be used for both Client and Server authentication.
Here is a related article below for you:
Certificate Templates Overview
https://technet.microsoft.com/en-us/library/cc730826(v=ws.10).aspx
In addition, if you have further query regarding certificates or CA, please refer to security forum below:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserversecurity
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]