Getting error while setting up another CMG connection point in environment

Question

Dear Team,

With the purpose of having redundancy for the CMG in the environment, we thought of setting up another CMG connection point role at a different location.

While during the installation of CMG connection point role, we are getting the below error.

FYI - We found that the thumbprint of already running CMG connection point is same as of new CMG connection point server which we are trying to build. In fact, the subject alternative name has both the server names. So, would that be a problem? Do we need to generate separate cert for new CMG connection point?

Your guidance is needed here please.

Answer 1

Hi,

Yes, you should generate a separate certificate for the new CMG connection point. Each CMG connection point should have its own unique certificate to avoid conflicts.

More info:

https://techcommunity.microsoft.com/t5/configuration-manager/cmg-missing-role-certificate-reload-in-next-cycle/m-p/2220407