Hi,

I need move SCCM database between old and new DB server. I see it is necessary to export / import certificates between SCCM servers. Unfortunately I'm not feel strong enough in certificates matter... Could I ask you what certificates should be moved before I will start SCCM database movement?

Thank you

Hi Peter,

Thank you for your answer but... I know this article. There is nothing about certificates. In article comments there is info how to import certificate but... it is not working for me:

I have a solution on the Certificate / Trusted problem.

go to the SCCM server open run and typ "MMC"

in that console open file and add snappin.

ADD certificate. in that wizard:

"service account" next

Local computer Next

find SMS_SITE_COMPONENT_SERVER finish

go to STS_SITE_COMPONENT_MANAGER\trusted pepole

and take the domain certificate there an right click. all task> Export.

copy the CRT file to the new SQL server and import that to local computer > trusted pepole.

In my environment, I haven't there domain certificate. I have there only Sec. Site servers (BTW: not all) and DB server certificate. :-(

Hi,

I found the importing certificates steps in a similar case. It indicates you need to export certificates related to the SCCM server.

a. On the SCCM server, open mmc, Add/Remove Snap-in and click add on Certificates
b. Select Service account option and click Finish
c. Select Local computer and click Next
d. On the Service Account window, select SMS_SITE_COMPONENT_MANAGER and click Finish
e. Expand Certificates root and go to SMS_SITE_COMPONENT_MANAGER\Trusted People , select the certificate present related to the SCCM server and Export it
f. On the new SQL server, copy the certificate locally and, run mmc and Add the Certificates Snap-in, selecting Local Computer and import the Certificate into the Trusted People\Certificates folder
g. Open SQL Server Configuration Manager and confirm if SQL Server Network Configuration > Protocols for MSSSQLSERVer , select Certificate tabs and select the ConfigMgr certificate

Best Regads,

Joyce

Thank you Joyce,

I have found similar tutorial but... there is small issue at point "e". On my SCCM server there is missing Primary Site server certificate ! :-(  There is only few Sec. Site servers (not all) and database server certificate. Nothinng more. So, I can't export SCCM certificate :-( 

Yes, I know this is an old post, but Im trying to clean them up. Did you solve this problem, if so what was the solution?

Since no one has answer this post, I recommend opening  a support case with Microsoft Customer Support Services (CSS) as they can work with you to solve this problem.