SCCM PKI - SMSPXE IN SSL , NO CLIENT CERT

Question

Hi, i did remove and requested a new cert for the DP and exported it on the DP https settings. the cert is applied and put it the password.
i also checked if there are any certificates being blocked by SCCM but there is none.

Answer 1

@D1enonly

Thank you for posting in Microsoft Q&A forum.

Could we know that our task sequence is deployed to known or unknow clients? If we are deploying to unknown client, please help check have we enabled unknown computer support on our DP's settings ? And have we deployed a task sequence to the unknown computers collection?

I know it sounds simple and was probably already ruled out for some reason, but I haven't seen you mention it.

Have a nice day!

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

HI, The task sequence is deployed to all Unknown computers.

and the unknown computer is ticked on that

Answer 3

@D1enonly

I reviewed this case again. As you mentioned before, you have removed the certificate and added a new one. Could we consider this certificate is ok and then have a try?
1.Generally speaking, our DP has two certificates. When communicating with the client to be deployed, this client will obtain the certificate from our DP. Another certificate is used for site server and MP.

2.Have we chosen use HTTPS option? If we choose it, the server must have a valid PKI web server certificate.
Here are some helpful article for you to refer to:
configure client pki certificates
deploy-pki-certificates-for-sccm-2012-r2
Note: This is non-official Microsoft article just for your reference.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.