Modern Workplace Consultant and Microsoft Certified Trainer

Today I had a problem with a workstation that didn’t want to communicate with the SCCM server.
After some hours digging in the too many logfiles from SCCM, I finally found the problem and also the solution.

First of all the problem.
clientcertnone
I make use of the SSL certificate, so at the “Client Certificate” property must be PKI instead of None.

After looking around in the ClientIDManagerStartup.log, it doesn’t appear to have an issue detecting and selecting the PKI certificate.
But in the MP_RegistrationManager.log, I see the following error:
mpregistrationerror

So I wanted to get started again from scratch with the below steps:

  1. Delete the computerobject of the problematic workstation from SCCM via the SCCM console
  2. Stopping Windows Management Instrumentation service
  3. Stopping SMS Agent Host service
  4. Uninstall the CCM Client with command C:\Windows\ccmsetup\ccmsetup.exe /uninstall
  5. Delete C:\windows\ccm
  6. Delete C:\windows\ccmsetup
  7. Delete C:\windows\ccmcache
  8. Delete C:\Windows\SMSCFG.ini
  9. Open regedit
  10. Delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCM
  11. Delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCMSetup
  12. Delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS

After you have done this, you can reboot the workstation, but you may continue to restart the Stopping Windows Management Instrumentation service and reinstall the client.
One you have followed the above steps, the CCM client will be installed again and pickup the correct certificates for communicating with the SCCM server.

clientcertpki

You can verify this in ClientIDManagerStartup.log
clientidmanagerstartupsucces

and in the MP_RegistrationManager.log.
mpregistrationsucces

You’ve successfully subscribed to Jeroen Burgerhout
Welcome back! You’ve successfully signed in.
Great! You’ve successfully signed up.
Success! Your email is updated.
Your link has expired
Success! Check your email for magic link to sign-in.