How To Configure Internet-Based Client Management (IBCM) in Microsoft SCCM
Overview
This guide is also available on my personal blog: https://setupconfigmgr.com/how-to-configure-internet-based-client-management-ibcm-in-microsoft-sccm
In this step-by-step guide, we will walk through the process of installing and configuring a Microsoft SCCM site to use Internet-Based Client Management.
Video Guide
Topics in Video
- Reviewing Internet-Based Client Management Prerequisites - https://youtu.be/GbIOxNhJ9lU?t=1
- Requesting the IIS Certificate on the Internet-Facing Site System - https://youtu.be/GbIOxNhJ9lU?t=508
- Changing WSUS to require SSL - https://youtu.be/GbIOxNhJ9lU?t=806
- Installing the Software Update Point - https://youtu.be/GbIOxNhJ9lU?t=1203
- Installing the Management Point and Distribution Point - https://youtu.be/GbIOxNhJ9lU?t=1656
- Verify Client Gets New IBCM MP - https://youtu.be/GbIOxNhJ9lU?t=2019
- Verify Content Gets Distributed To IBCM DP - https://youtu.be/GbIOxNhJ9lU?t=2119
- Checking the MPLIST and MPCERT on the Internet-Facing Management Point - https://youtu.be/GbIOxNhJ9lU?t=2160
- Client Testing on the Internet - https://youtu.be/nChKKM9APAQ?t=1176
Documentation for Topics in this Guide:
- Plan for Internet-based client management in System Center Configuration Manager - /en-us/sccm/core/clients/manage/plan-internet-based-client-management
- Features that Are Not Supported on the Internet - /en-us/sccm/core/clients/manage/plan-internet-based-client-management
- Considerations for client communications from the Internet or untrusted forest - /en-us/sccm/core/clients/manage/plan-internet-based-client-management#considerations-for-client-communications-from-the-internet-or-untrusted-forest
- Prerequisites for Internet-Based Client Management (IBCM) in Configuration Manager - https://blogs.technet.microsoft.com/jchalfant/prerequisites-for-internet-based-client-management-ibcm-in-configuration-manager/
- How To Configure Microsoft SCCM to Use HTTPS/PKI - https://setupconfigmgr.com/how-to-configure-microsoft-sccm-to-use-https-pki
- How to Publish the CRL on a Separate Web Server - https://cloudblogs.microsoft.com/enterprisemobility/2009/05/01/how-to-publish-the-crl-on-a-separate-web-server/
- Common HTTPS errors in Configuration Manager - https://blogs.msdn.com/b/ameltzer/archive/2008/04/14/common-native-mode-client-mp-error-messages-and-what-to-do-about-them.aspx
- Ports Required for a Site System in DMZ in Configuration Manager - https://blogs.technet.microsoft.com/b/jchalfant/archive/2015/04/08/ports-required-for-a-site-system-in-dmz-in-configuration-manager.aspx
- IIS Error 403.13 Client Certificate Revoked if IIS can’t access the Clients CRL Distribution Point - https://support.microsoft.com/en-us/help/294305/iis-returns-http-403-13-client-certificate-revoked-error-message-altho
- How to Configure the WSUS Web Site to Use SSL – https://technet.microsoft.com/en-us/library/bb633246.aspx