KB: An update for the bootstrap certificate in System Center Configuration Manager 2007 Asset Intelligence is available

In Microsoft System Center Configuration Manager 2007, the issuing certificate that System Center Online uses to validate the bootstrap certificate expires in September 2012. After this date, System Center Online does not recognize the bootstrap certificate. A supported hotfix is now available from Microsoft. For all the details including instructions on how to obtain this… Read more

KB: A PXE enabled Distribution Point that uses a self-signed certificate will generate many files in System Center 2012 Configuration Manager

Here’s a new Knowledge Base article we published. This one describes an issue where a PXE enabled Distribution Point will generate a large number of files under C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18 for each PXE request that it services on the network. ===== Symptoms A PXE enabled Distribution Point will generate a number of files under C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18 for each… Read more

Announcement: Update your System Center Online Authentication Certificate for Asset Intelligence Today!

Microsoft’s own Yvette O’Meally just posted an announcement saying that you’ll need to renew your System Center Online Authentication Certificate before it expires. If you do not renew your certificate and it expires, you will no longer be able to synchronize with System Center online: When the Configuration Manager 2007 Asset Intelligence synchronization point first… Read more

Quick Fix: Error 0x80090304 returned by InitializeSecurityContext when provisioning AMT devices in ConfigMgr 2007

You find that you are unable to provision AMT devices in System Center Configuration Manager 2007 SP2 using an external certificate provided by VeriSign.  However, using your Internal CA you find that you can successfully provision new machines.  When attempting to provision an AMT device using your external certificate you receive the following error: Error:… Read more

Computers upgraded to Windows 7 using ConfigMgr 2007 OSD might generate a new SMS GUID

According to the System Center Configuration Manager Team Blog, if Windows hotfix KB974571 is installed on a Windows 7 reference image, then it is highly likely that you would see the following log entries in smsts.log when deploying this image to an existing client. Notice that because the client certificates were not found, the end… Read more

New Hotfix available: KB977203 – User state migration fails on a SCCM 2007 SP1 or SP2 client after you install security update 974571

Consider the following scenario: You install the System Center Configuration Manager 2007 Service Pack 1 (SP1) client or the System Center Configuration Manager 2007 Service Pack 2 (SP2) client. You install security update 974571 on this computer. A SCCM task sequence runs on this client. This task sequence includes the Capture User State task sequence… Read more

Recommendations for PKI Key Lengths and Validity Periods with Configuration Manager 2007

Just in case you missed it, Carol Bailey has posted yet another fantastic article on certificates over on the http://blogs.technet.com/configmgrteam blog. If certificates are as confusing to you as they are to me then you’ll definitely want to give this one a good read.  I have her intro and a link below: ======== I sometimes… Read more

How to Publish the CRL on a Separate Web Server

Just in case you missed it, Carol Bailey has another fantastic post over on this System Center Configuration Manager Team blog where she discusses publishing the CRL on a separate web server.  It’s definitely worth a read and I have her intro and a link below: ======== By default, an issuing enterprise CA publishes its… Read more

Resolving Certreq Errors: Key Size and User Permissions

Carol Bailey hits another home run with her post yesterday on resolving a couple of Certreq errors involving Key Size and User Permissions, specifically: The public key does not meet the minimum size required by the specified certificate template. 0x80094811 (-2146875375) Denied by Policy Module. and The permissions on the certificate template do not allow… Read more