You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -37,14 +37,14 @@ The CMG connection point requires a [server authentication certificate](/mem/con
37
37
38
38
### Resolution
39
39
40
-
To fix this issue, generate a [server authentication certificate](/mem/configmgr/core/clients/manage/cmg/certificates-for-cloud-management-gateway#bkmk_clientauth) for the CMG connection point.
40
+
To resolve this issue, generate a [server authentication certificate](/mem/configmgr/core/clients/manage/cmg/certificates-for-cloud-management-gateway#bkmk_clientauth) for the CMG connection point.
41
41
42
42
> [!NOTE]
43
43
> In the certificate, computers must have a unique value in the **Subject Name** or **Subject Alternative Name** field.
44
44
45
-
### How to verify CMG has a server certificate?
45
+
### How to verify CMG has a server certificate
46
46
47
-
After you enable verbose logging, the **SMS_Cloud_ProxyConnector.log** file will show the list of available certificates on the server. To verify if a valid server authentication certificate to establish communication between the CMG connection point and the management point exist, check the number of certificates in the **Filtered cert count with client auth:** line. See the following log for an example:
47
+
After you enable verbose logging, the **SMS_Cloud_ProxyConnector.log** file will show the list of available certificates on the server. To verify if a valid server authentication certificate to establish communication between the CMG connection point and the management point exists, check the number of certificates in the **Filtered cert count with client auth:** line. See the following log for an example:
48
48
49
49
**SMS_Cloud_ProxyConnector.log**
50
50
@@ -131,13 +131,13 @@ This issue occurs if one or more of the following conditions are true:
131
131
132
132
- The client doesn't have the necessary PKI Root CA to validate the server authentication certificate.
133
133
- The certificate presented to the client is incorrect.
134
-
- The CRL that contains the certificate isn't published on the Internet and client is enforced to validate the CRL.
134
+
- The CRL that contains the certificate isn't published on the Internet and the client is enforced to validate the CRL.
135
135
136
136
### Resolution
137
137
138
138
If you're using a PKI server authentication certificate, follow these steps:
139
139
140
-
1. Make sure that the certificate presented to client has the expected CMG name. If you're using third-party services that use certificate pining and modify the presented certificate, the clients can't validate the server certificate.
140
+
1. Make sure that the certificate presented to the client has the expected CMG name. If you're using third-party services that use certificate pinning and modify the presented certificate, the clients can't validate the server certificate.
141
141
142
142
To verify which certificate is presented, open the following URL in the web browser:
143
143
@@ -193,7 +193,7 @@ To renew the expired token, connect the client to the internal MP directly or re
193
193
194
194
## More information
195
195
196
-
For further troubleshooting, of Client to CMG communication issues, we recommend next actions:
196
+
For further troubleshooting, do the following actions:
0 commit comments