Forums on Intune, SCCM, and Windows 11

Welcome to the forums. Register a free account today to become a member! Once signed in, you'll be able to participate on this site by adding your topics and posts, as well as connect with other members through your own private inbox!

SOLVED Client certificate is none when sccm client is installed

Status
Not open for further replies.

arun ganesh

Member
Messages
21
Reaction score
0
Points
1
Hi,
In some machine whenever I install the SCCM client manaully , i found that client certificate is shown as none and ccm notification agent is disabled. Though the site code is visible. The boundaries has been defined and client falls within the defined boundaries. can someone please resolve this.
 
Solution
Delete C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys folder and restart the ccmexec service .Wait for 5-10 mins .The client certificate will change from none to self signed and machine starts communicating to the management point . Now you can update user and machine retrieval policies .It will start downloading the remaining components for the machine .
Could you check ccmexec.log file and see if there are any errors ?.Also check policyagent.log, clientidstartupmanager.log, and certificatemaintenance.log?.
How many actions do you have on the actions tab?
 
Last edited:
Delete C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys folder and restart the ccmexec service .Wait for 5-10 mins .The client certificate will change from none to self signed and machine starts communicating to the management point . Now you can update user and machine retrieval policies .It will start downloading the remaining components for the machine .
 
Solution
Delete C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys folder and restart the ccmexec service .Wait for 5-10 mins .The client certificate will change from none to self signed and machine starts communicating to the management point . Now you can update user and machine retrieval policies .It will start downloading the remaining components for the machine .
This work in my recent case, after almost 6 years.....

love this site!
 
Status
Not open for further replies.
Back
Top