WSUS and SCEP with a CAS

[Special Ed]

Hi all,

 

I'm curious about a best practice question.

 

Assume you have a CAS and a primary server. WSUS/SCEP replication with MS is setup on the CAS.

 

Do you let your CAS manage your SUP and SCEP deployments? For example, build your collections on your primary, then configure an autodeployment for SCEP and one for SUP on your CAS?

 

Or should you then setup WSUS/SUP/SCEP on your primary and deploy from there?

 

It seems to be that you should do SUP/SCEP from the CAS, but I thought I would ask. Maybe there's a reason you shouldnt.

 

Thanks