MP healthy check

Menta Elise 175 Reputation points
2023-12-06T01:06:46.6466667+00:00

I use the URLs to test whether a MP is working before we enable https mode without any issue:

http://<MPServer>/sms_mp/sms_aut?mplist

http://<MPServer>/sms_mp/sms_aut?mpcert

But I get an error with the url after I enable https, the error is access denied, any idea?

Microsoft Configuration Manager
0 comments No comments
{count} votes

Accepted answer
  1. AllenLiu-MSFT 45,066 Reputation points Microsoft Vendor
    2023-12-06T01:56:05.0633333+00:00

    Hi, @Menta Elise

    Thank you for posting in Microsoft Q&A forum.

    This is because the CM client uses a computer certificate to communicate with the management point but when you are using a normal user you don’t have access to this certificate.

    We can specify a certificate to use by using PowerShell as an admin and running the command Invoke-WebRequest.

    $cert = Get-ChildItem -Path "cert:\LocalMachine\My\<ThumbprintOfCert>"
    Invoke-WebRequest -Uri "https://<mp_server_name>/sms_mp/.sms_aut?mplist" -Certificate $cert
    

    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.