This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 7.000000000000001%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVP%3C/text%3E%3C/svg%3E)
I am facing an issue in my Azure ad join laptop and there is an issue that sync could not be initiated 0x80190190 and in event logs, I am getting an error that MDM Session: OMA-DM message failed to be sent. Result: (Bad request (400).). I am attaching a screenshot of the errors I am facing. Please help me to resolve these errors.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 30%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
@Vanshika Parmar, Thanks for posting in Q&A. For the sync error, I have met one similar issue before. It can be that a registry key that was completely missing from the devices
HKLM\SOFTWARE\Microsoft\Provisioning\OMADM\Accounts*guid*\SslClientCertReference
If not there, please create this key with the Intune MDM certificate thumbprint. with the value like MY;System;thumbprint
Hope the above information can help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
@Vanshika Parmar, Hope things are going well. I am writing to see if the above suggestion can help. If there's any update, feel free to let us know.
kindly give me some time. I will update you
@Vanshika Parmar, OK, no problem.
@Vanshika Parmar, Long time not heard from you. I am writing to see if the above issue is resolved. If there's any update, feel free to let us know.
hey,the issue is not yet resolved. we are facing the same issue and there is no option such thumbprint.
@Vanshika Parmar, Thanks for the reply. From your description, it seems the registry key is missing the thumbprint. If there's any misunderstanding, please let me know.
If so, please enter CERTLM.MSC in search box or run. Then local machine certificate store will be opened. Then we can find the Intune MDM certificate.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(32, 13%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Any idea what is causing this? We have environment where some devices are missing SslClientCertReference and adding it to registry fixes issue.
I have seen this happening when there also different certificates on the device with the same device id...
As mentioned here... that could lead to serious issues on your devices:https://call4cloud.nl/2023/11/sslclientcertreference-without-a-cause/#part3
That blog also contains the scripts to fix it and check fo the sslclientcert and if nog set, fixing it
Thank you for the answer. I am now testing remediation script that checks does SslClientCertReference exists. If it is missing script search thumbprint from HKLM:\SOFTWARE\Microsoft\Enrollments$GUID and set it to HKLM:\SOFTWARE\Microsoft\Provisioning\OMADM\Accounts$GUID