ConfigMgr Client Certificate (PKI) Value is None

Today I had a problem with a workstation that didn’t want to communicate with the SCCM server.
After some hours digging in the too many logfiles from SCCM, I finally found the problem and also the solution.

First of all the problem.

I make use of the SSL certificate, so at the “Client Certificate” property must be PKI instead of None.

After looking around in the ClientIDManagerStartup.log, it doesn’t appear to have an issue detecting and selecting the PKI certificate.
But in the MP_RegistrationManager.log, I see the following error:

So I wanted to get started again from scratch with the below steps:

1. Delete the computerobject of the problematic workstation from SCCM via the SCCM console
2. Stopping Windows Management Instrumentation service
3. Stopping SMS Agent Host service
4. Uninstall the CCM Client with command C:\Windows\ccmsetup\ccmsetup.exe /uninstall
5. Delete C:\windows\ccm
6. Delete C:\windows\ccmsetup
7. Delete C:\windows\ccmcache
8. Delete C:\Windows\SMSCFG.ini
9. Open regedit
10. Delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCM
11. Delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCMSetup
12. Delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS

After you have done this, you can reboot the workstation, but you may continue to restart the Stopping Windows Management Instrumentation service and reinstall the client.
One you have followed the above steps, the CCM client will be installed again and pickup the correct certificates for communicating with the SCCM server.

You can verify this in ClientIDManagerStartup.log

and in the MP_RegistrationManager.log.