PENDING Install sccm agent and manage workgroup computers

[Gams]

Hi @Prajwal Desai,
I'm a big follower of your articles which really helped increase my knowledge in sccm and really grateful! Pls would be able to point me in the right direction to successfully manage workgroup computers in a PKI environment. I'm on the same case as reza5 on the thread below but still not able to solve the puzzle. Our Sccm is on branch v2309, purely managing AD joined computers, PKI enabled using our internal CA, boundary setup using ip ranges and AD site but its only seeing domain joined devices.
Reference thread = https://forums.prajwaldesai.com/threads/sccm-workgroup-client-not-using-client-cert.4768/post-18363
Logs
Ccmsetup.log =Error 0x80041013 ccmsetup 03/10/2024 13:45:21 2804 (0x0AF4)
ClientIDManagerStartrup.log = RegTask: Failed to send registration request. Error: 0x8000000a
CcmMessaging.log = Failed in WinHttpSendRequest API, ErrorCode = 0x2f8f
LocationServices.log = [CCMHTTP] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered
Any help will be appreciated.

 

[Gams]

Hi @Prajwal Desai,
I'm a big follower of your articles which really helped increase my knowledge in sccm and really grateful! Pls would be able to point me in the right direction to successfully manage workgroup computers in a PKI environment. I'm on the same case as reza5 on the thread below but still not able to solve the puzzle. Our Sccm is on branch v2309, purely managing AD joined computers, PKI enabled using our internal CA, boundary setup using ip ranges and AD site but its only seeing domain joined devices.
Reference thread = https://forums.prajwaldesai.com/threads/sccm-workgroup-client-not-using-client-cert.4768/post-18363
Logs
Ccmsetup.log =Error 0x80041013 ccmsetup 03/10/2024 13:45:21 2804 (0x0AF4)
ClientIDManagerStartrup.log = RegTask: Failed to send registration request. Error: 0x8000000a
CcmMessaging.log = Failed in WinHttpSendRequest API, ErrorCode = 0x2f8f
LocationServices.log = [CCMHTTP] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered
Any help will be appreciated.

Hi All, Just to say that I have made a little progress on this query. I think the pki authentication is now working on my workgroup computer after enbaling CRL via http on our internal CA. The machine also now appears on sccm but with a question mark and CCMNotificationAgent.log is showing the below. No obvious errors on the other client logs. Any advise from the experts will be appreciated. Thanks