silentcrash.com
Installing SCOM 2012 agent on a workgroup or DMZ machine using Certificate
How to Install SCOM Agent on a DMZ / WG / un-trusted forest Machine. In order for SCOM to communicate with an un-trusted machine, you will have to import a certificate so that SCOM will trust the foreign machine and will be able to communicate with it.