[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

SCCM - Native Mode Cert Selection Criteria

Posted on 2011-03-22
4
Medium Priority
?
982 Views
Last Modified: 2013-11-21
Having some issues with a few of our undeployed clients. The error in the ccmsetup.log files is stating that there are X number of certificates that match and then the one chosen fails.

I have read numerous articles and seen some peoples suggestions to change the radio button from "Fail selection and send error message" to "Select any certificate that matches". This helped a few but I read that this method has SCCM default to choosing the Cert with the longest validity period. Well the SCCM Client Authentication one isn't always the longest valid cert.

So in short, I have found that I prob need to specify certain criteria for SCCM to select the appropriate client certificate.

Now comes the problem. This microsoft technet article HERE shows the supported attribute values. However, to me, these look like AD schema values. Not all of them can be seen in the Certificate. I have searched all over the web and it seems that no one has a great write up on how to pick a pretty solid, best practice, attribute to distinguish with and how to apply that. I don't know why it wouldn't be as easy as telling SCCM to look for the certificate that came from the original template that Microsoft walks you through creating. This would be a failsafe way of SCCM picking the correct one every time.

I also saw there is a way to deploy the certs to different cert store and then having SCCM look there but for now it seems that the selection criteria is easier.

Can anyone help me out to get this problem resolved?
0
Comment
Question by:ExproDustinEstes
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 

Author Comment

by:ExproDustinEstes
ID: 35207598
Anyone have any help on this matter?
0
 
LVL 1

Accepted Solution

by:
weaze1 earned 1000 total points
ID: 35256466
Hi,
We have the following settings defined for cert selection & since have no problems.
Certificate Criteria = "Subject String Contains"
then ".our.domin.com" dont forget leading dot
finally "select any certificate that matches"

If you check client logs you should see the certificate selection process listing any that don't apply & finally selecting corrct cert.
0
 

Author Comment

by:ExproDustinEstes
ID: 35816647
This didn' resolve my issue. Had some consultancy and there doesn't seem to be a decent answer for this anywhere. Hopefully 2012 adds some more decent selection functionality and compatiblity
0
 

Author Closing Comment

by:ExproDustinEstes
ID: 35816666
Didn't fix my issue but thank you for helping.
0

Featured Post

How to Use the Help Bell

Need to boost the visibility of your question for solutions? Use the Experts Exchange Help Bell to confirm priority levels and contact subject-matter experts for question attention.  Check out this how-to article for more information.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lync meeting or Lync conferencing is what many organizations would like to deploy to allow them save money. But companies are now giving up for various reasons, one of which is that they cannot join external meetings (non-federated company meetings)…
Deploying a Microsoft Access application in a Citrix environment is not difficult but takes a few steps. However, Citrix system people are often of little help, as they typically know next to nothing about Access. The script provided here will take …
The viewer will learn how to simulate a series of coin tosses with the rand() function and learn how to make these “tosses” depend on a predetermined probability. Flipping Coins in Excel: Enter =RAND() into cell A2: Recalculate the random variable…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question