We actually have a PKI, HTTPS setup and working and even have a couple of agents installed with Endpoint configured (we did this over the past two weeks). Our sales laptops are apart of the domain and will get the cert via group policy. We will install the client with LanDesk which will give us the ability to customize the install with the switches you provided earlier.
We do have a DMZ but from what I understand, we need that DMZ site system server on the domain? That's the part we'd have to figure out. I don't think we have routes setup.
Just to clarify, we will need to setup a server in the DMZ, put a client on it and then through SCCM add the roles to it or do we need to install SCCM on it and then add the roles? That's the part I'm kind of unclear about.
thanks again for your help!