Hi fellas,

I'm trying to implement the Intel SCS to harness the Intel AMT platform which so many of our workstations have on board via their vPro chips.

Part of that process is to install the SCCM Enrollment point and out-of-band management points.  I've configured the AMT Provisioning certificate as per instructions here:

https://technet.microsoft.com/en-us/library/gg682023.aspx

Although the two roles appear to install correctly, looking at the SMS_ENROLL_SERVER component in Monitoring yields that the Site Component Manager is recurrently trying and failing to install the role, for this reason:

Site Component Manager failed to install this component, because Secure Sockets Layer (SSL) is not configured properly on the Internet Information Server. 

Possible cause: No Server Certificate is attached to the designated Web Site.
Solution: Refer to ConfigMgr Documentation regarding how to create and attach a proper Server Certificate to the designated Web Site. 

Possible cause: The Server Certificate is invalid or expired.
Solution: Refer to ConfigMgr Documentation regarding how to create and attach a proper Server Certificate to the designated Web Site.

When looking at the Enrollment point Properties in Administration, I see that it's configured to communicate via HTTPS.

The Management Point is configured to use HTTP.

Does the MP have to be in HTTPS mode to use an Enrollment Point?



• Edited by Atreus21 13 hours 9 minutes ago

Hi,

Have you installed a web server certificate in ISS and bound it to use HTTPS as well under bindings? It sounds like that is the issue..

Regards,
Jrgen

Bingo.  You nailed it sir.  The certificate wasn't selected under Default Web Site > SSL Settings > Bindings in the HTTPS binding in IIS.

Thank you very much.

• Edited by Atreus21 10 hours 42 minutes ago