Your company has two Active Directory domains. One domain is located in the trusted network. The other domain is located in the perimeter network. No trust relationship exists between the two domains. You deploy System Center Operations Manager 2007 in the Active Directory domain on the trusted network. You manually install the agent on an application server that resides in the Active Directory domain in the perimeter network. The agent does not appear in the Operations Console. An error event indicates that the agent is unable to obtain configuration information from the Management Server. You need to configure Operations Manager 2007 to monitor the agent. What should you do?
A.
Disable mutual authentication in the Operations Console.
B.
Perform a push installation of the agent to the target server.
C.
Configure the agent on the application server to use certificate-based authentication.
D.
On the Management Server, configure Auto Agent Assignment settings. Use the MOMADAdmin utility to publish Management Group information to the Active Directory domain in the perimeter network.
Explanation:
C: CORRECT
If you are deploying Ops Mgr on machines in untrusted domains or DMZs (anywhere outside of Kerberos trust), then you are going to need to leverage PKI and set up certificates on your boxes in order for authentication to work.from : http://blogs.technet.com/momteam/archive/2008/06/02/obtaining-certificates-for-ops-mgr.aspx