When your SCCM Site Server Signing Certificate has expired you will experience problems with packages, virtual applications and OS deployment with your SCCM clients. The SCCM server reports “SMS Policy Provider has failed to sign one or more policy assignments. It will retry this operation automatically.” in the Component Status SMS_POLICY_PROVIDER.
This article consists of two parts how to check expiration and renew the certificate:
A. How to check if the SCCM Site Server Signing Certificate is expired
B. How to create a request file to renew the certificate (only working method to renew!)
A. How to check if the SCCM Site Server Signing Certificate is expired
1. In the Configuration Manager Console, navigate to Site Management
2. Open the Properties of your Site
3. Open Site Mode and note the name of the Certificate
4. Click on Browse…
5. Check the corresponding certificate name and check the Valid From date
If the certificate is expired, you have to renew the certificate by following the steps below.
B. How to create a request file to renew the certificate
Be sure to do this outside work hours, because it impacts the SCCM clients.
1. Create a new file ‘sitesigning.inf’ with the following content:
[NewRequest] FriendlyName = "SCCM Site Signing Server Certificate [your site code]" Subject = "CN=The site code of this site server is [your site code]" MachineKeySet = True [RequestAttributes] CertificateTemplate = ConfigMgrSiteServerSigningCertificate
2. Save the file and open an elevated command prompt.
3.Type the following commands in the folder where you saved the file:
certreq –new sitesigning.inf sitesigning.req
certreq –submit sitesigning.req sitesigning.cer
4. Select the correct CA:
Output of certreq commands:
The certificate is now requested at your Certificate Authority.
5. Issue the certificate in your CA in Pending Requests and remember the Request ID
6. In an elevated cmd on the SCCM server again, type the following command:
certreq –retrieve [requestidnumber] sitesigning.cer
7. Select the correct CA again:
8. Open the local Certificate store by opening an new mmc and add Certificates (Local Computer)
9. Check if the certificate is present in Personal / Certificates (a little key must appear with the certificate! if not, the certificate does not contain the private key)
11. In the Configuration Manager Console, navigate to Site Management
11. Open the Properties of your Site
12. Open Site Mode, click on Browse and select the new certificate
The certificate is now renewed.
You can check the SMS_POLICY_PROVIDER status again under: System Status > Site Status > [Site code] > Component Status
If the certificate is correctly renewed, the message ‘SMS Policy Provider successfully signed all policy assignments with the new Site Server Signing Certificate.’ will appear. Your SCCM clients will then be functional again.
poker online
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
Thanks for sharing your thoughts about domino qq.
Regards
drain survey west midlands
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
сериалы 2021 онлайн
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
сериалы онлайн
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
Сериалы 2022 онлайн
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
фильмы онлайн
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
фильмы 2022 года онлайн
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
cctv drain survey west bromwich
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
дивитися тут
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
тіркеусіз және SMS-хабарламасыз Фильмдер
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
мультфильмдер 2022 онлайн
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
Лучшие фильмы lostfilm
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
манхуа мангасын онлайн оқыңыз
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
2022 онлайн сериялары
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
.
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
Смотреть тут бесплатно lostfilm
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
2022 фільми онлайн
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
мұнда тегін
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
2022 онлайн lostfilm сериялары
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
мына жерде комикстерді оқыңыз
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
*
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
комікси про Супермена
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
фільми без реєстрації і смс lostfilm
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
фільми без реєстрації і смс
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
Боруто манга читати
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
тегін Манга жүктеңіз
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
безкоштовні фільми lostfilm
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
lostfilm фильмін қайда көруге болады
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
Скачати комікси безкоштовно
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
серіали онлайн lostfilm
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
фильмді
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
Читать махву здесь
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
марвел комикстері
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
Скачати манхву безкоштовно
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
2022 сериалы онлайн lostfilm
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT
загонка зеркало
How to renew the SCCM Site Server Signing Certificate | SteelBytes.NeT