How to Identify Client Certificate Issues in Native Mode

Applies To: System Center Configuration Manager 2007, System Center Configuration Manager 2007 R2, System Center Configuration Manager 2007 R3, System Center Configuration Manager 2007 SP1, System Center Configuration Manager 2007 SP2

When a Configuration Manager 2007 site is configured for native mode, clients that fail to mutually authenticate with site systems will be unmanaged. Possible reasons for the failure include an expired certificate on the client, an invalid certificate, a certificate from an untrusted source, or a missing certificate.

noteNote
The certificates used in Configuration Manager 2007 native mode are managed externally to Configuration Manager 2007 and are dependent on your public key infrastructure (PKI) deployment. For more information, see Deploying the PKI Certificates Required for Native Mode.

If clients are assigned a fallback status point, they will send it state messages if they experience certificate issues, which are then relayed back to the site. To view these reported certificate issues when the site is configured for native mode, run the following reports that have the report category of Site - Client Information:

  • Issues by incidence detail report for a specific collection

  • Issues by incidence summary report for a specific collection

  • Issues by incidence detail report for a specific site

  • Issues by incidence summary report

ImportantImportant
If clients are not assigned a fallback status point, these reports will not contain any information.

To view these reports, follow this procedure.

To identify client certificate issues in native mode by running reports:

  1. In the administrator console, navigate to System CenterConfiguration Manager/ Site Database / Computer Management / Reporting / Reports.

  2. In the Reports node, click the Category column to sort the reports so that you can more easily find the reports with the category Site -Client Information.

  3. Right-click one of the following reports, and then select Run:

    • Issues by incidence detail report for a specific collection

    • Issues by incidence summary report for a specific collection

    • Issues by incidence detail report for a specific site

    • Issues by incidence summary report

  4. In the Report Information page, supply any additional information required and then click Display to view the report.

  5. Close the report.

See Also

For additional information, see Configuration Manager 2007 Information and Support.
To contact the documentation team, email SMSdocs@microsoft.com.

Community Additions

ADD
Show: