PENDING SCCM Client Installation with GPO failed due to certificate absence

[youssaid]

Hello,
After switching to HTTPS communication mode I have noticed that new joined servers to the domain fail to install sccm client,
The issue is when the installation starts the client can't find the cert in the cert store.
And when I import the certificate manually and re-run the installation it completes successfully, my question is how can I ensure the presence of the certificate on the server at the time of client installation? knowing that the auto-enrolment is configured on all domain computers.
Thank you.

 

[youssaid]

@Prajwal Desai any help will be much appreciated, thank you.

 

[Prajwal Desai]

Hello,
After switching to HTTPS communication mode I have noticed that new joined servers to the domain fail to install sccm client,
The issue is when the installation starts the client can't find the cert in the cert store.
And when I import the certificate manually and re-run the installation it completes successfully, my question is how can I ensure the presence of the certificate on the server at the time of client installation? knowing that the auto-enrolment is configured on all domain computers.
Thank you.

May I know what cert is that? What's the ConfigMgr version and did you check for errors in the client log files?.

 

[youssaid]

Hello @Prajwal Desai
I want to inform you that the issue has been solved after merging the two GPO's that controls the client installation and the certificate enrollment.
And changing the execution order of the settings in a way that allows clients first to enroll the certificate and then install the client.
Best regards,
Youssef.