This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 84%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EB%3C/text%3E%3C/svg%3E)
I'm installing a cloud management gateway for an environment that have all machines Hybrid azure AD joined.
Can I still deploy CMG but not enable "HTTPS" for the management point? I want keep it HTTP so I don't need to publish a cert for clients.
If the answer is no and I need to enabled HTTPS for the management point , so that means I need to make sure all machines have the client cert , right ?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 66%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENH%3C/text%3E%3C/svg%3E)
Yes, you can use enhanced HTTP - see https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/enhanced-http
@Immer
Thank you for posting in Microsoft Q&A forum.
Like Nick said, enhanced HTTP is an alternatives for CMG.
If you enabled HTTPS for the management point, you may use GPO to make all machines have the client certs.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.