OpsMgr Connector cannot create a mutually authenticated connection

[Dallas Wilm - MCITP]

Scenario: We have a SCOM server offsite which is to be monitoring our 6
servers at our branch office. At the branch office 3 of the servers are on a
domain and 3 are member servers. I have installed the SCOM gateway on the
PDC at the branch office and installed the SCOM Agent on the remaining 5
servers. The gateway and the 2 servers which are on the domain are showing
up in SCOM without any issues. The other 3 member servers are giving the
error "The OpsMgr Connector cannot create a mutually authenticated connection
to nsl-ap01.nsl.local because it is not in a trusted domain.". I have
installed the trusted root certificates from the management server on all of
the servers. I have also tried installing the certificate authority on the
PDC and installing the trusted root certificate on the 3 member servers with
no luck. Is there any way to get these 3 member servers into SCOM other than
joining them to the domain. TYIA.

[Murad Akram]

You need to install client/server auth certs on all 3 servers that aren't
part of your domain, install SCOM Agent on all 3, point the Agents to your
Management Group name and Management Server, and use the MOMCertImport.exe
tool included in your OpsMgr install CD under tools folder to import your
certs into SCOM

These steps are listed in this microsoft art:
http://technet.microsoft.com/en-us/library/bb735413.aspx

--
Murad Akram