PENDING Installing SCCM Client using Token-based authentication and communication error

[ontario20]

Case: Install SCCM Client in a DMZ server using Token-based authentication and Manage via CMG

1. So generated the code based on the article provided here https://docs.microsoft.com/en-us/mem/configmgr/core/clients/deploy/deploy-clients-cmg-token
2. Since we are using Internal PKI cert on CMG, I have exported the Root certificate and imported into DMZ server,
3. Installation went fine and client was able to communicate well after the installation. It received all policies and able to push software updates/apps.

Problem Statement:
After some days/weeks SCCM client suddenly stopped communicating with CMG. The errors I am seeing in
CCMmessaging.log
Failed to get CCM access token and client doesn't have PKI issued cert to use SSL. Error 0x87d0027e. I am not sure if I am missing something here

 

[chucky12234]

Case: Install SCCM Client in a DMZ server using Token-based authentication and Manage via CMG

1. So generated the code based on the article provided here https://docs.microsoft.com/en-us/mem/configmgr/core/clients/deploy/deploy-clients-cmg-token
2. Since we are using Internal PKI cert on CMG, I have exported the Root certificate and imported into DMZ server,
3. Installation went fine and client was able to communicate well after the installation. It received all policies and able to push software updates/apps.

Problem Statement:
After some days/weeks SCCM client suddenly stopped communicating with CMG. The errors I am seeing in
CCMmessaging.log
Failed to get CCM access token and client doesn't have PKI issued cert to use SSL. Error 0x87d0027e. I am not sure if I am missing something here
View attachment 4546

I am having the same issue. Works fine for a couple of weeks, then some internet clients stop showing as online even though they are, have similar errors in CcmMessaging.log, ClientLocation.log. Did you ever find out why this is happening?

 

[chucky12234]

I generated and installed a client auth cert on the client in question. Restarted ccmexec and the cert gets validated and used and now the client is showing as online. So something with using tokens only was broken, but what and why? it worked when I first installed the client, and is still working for some of the other clients in the same configuration.