This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
I set up the CMG yesterday and it is kinda workingish....
I run the Cloud management gateway connection analyzer, but it doe snot run correctly.
I sign in with my Azure info, click start and only see the following:
As far as I can tell, its connected and I was able to deploy software from it.
Did you try closing and re-opening the analyzer? Sometimes it needs a sort of ‘reset’. Also, did you try against a client certificate? You can also refer to smsadminui log for clues.
Restarted the process a couple of times. Having other CMG issues as well. probably all related. Client cert does the same thing.
[18, PID:9160][09/10/2021 16:23:17] :System.Net.WebException
Unable to connect to the remote server
at System.Net.HttpWebRequest.GetResponse() at Microsoft.ConfigurationManagement.AdminConsole.AzureServices.CMGAnalyzer.backgroundWorker_DoWork(Object sender, DoWorkEventArgs e)
System.Net.Sockets.SocketException
No connection could be made because the target machine actively refused it 20.84.232.113:443
at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress) at System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Exception& exception)
In other words - networking issues. : (
Sure does. Is the traffic allowed on the FW?
I was able to get the Cloud management gateway connection analyzer working, but still seeing errors.
We use a proxy server on the SCCM server. I added it in SCCM, but the settings were disabled in the Internet Options. Once I unchecked Automatically detect settings and selected Use a proxy with the proxy settings entered, the connection analyzer ran fine.
Still seeing errors in the SMSAdminUI.log file
[29, PID:4016][09/13/2021 10:44:56] :System.Net.WebException
The remote server returned an error: (500) Internal Server Error.
at System.Net.HttpWebRequest.GetResponse()
at Microsoft.ConfigurationManagement.AdminConsole.AzureServices.CMGAnalyzer.backgroundWorker_DoWork(Object sender, DoWorkEventArgs e)
Now I am wondering if it is a certificate issue.
What is your certificate issued to? Are you using vmscale set by any chance?
If the connection analyzer is running then have you tried testing deployments over cmg?
Yes - using the new VM scale setup - not classic. I was able to deploy 7zip to my laptop using the CMG.
Should I be able to connect to CMG-connected endpoints' C:\? or remote desktop? Not able to do that.....
Then you should be good. Remote support is not supported over cmg, but you can use cmpivot to check the logs.
configmgr-cmpivot-in-all-its-glory_23.html
Hi, @Matt Dillon
Thank you for posting in Microsoft Q&A forum.
We may try to configure CNAME on internal DNS to see if it helps like below article suggested:
https://www.prajwaldesai.com/configmgr-cmg-error-the-remote-name-could-not-be-resolved/
(Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.)
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
I guess that is where the confusion lies as I did not think a CNAME was necessary when using the Azure name - NAME.CENTRALUS.CLOUDAPP.AZURE.COM
I can look into it as I am willing to try anything ....
Commented elsewhere, but wanted a more visible answer. I got the Connection analyzer working by setting the proxy settings in Internet Options.
It ran perfect when I used my azure sign in, but had two errors when I used a cert. What certificate file is this looking for in this test? The Client Authentication cert in Personal on any laptop? If so, I keep getting a message stating the certificate doe snot contain the private key. Help!
Are you using pki, third party for cmg? What version of CB do you have?
Using PKI certs and 2107 console.
If you are using pki for cmg, then you will need to enroll the cert chain in cmg client auth settings. Also you will need a pki client cert enrolled on your end points and site server hosting connection point. You should use the same client auth cert to test in cmg analyzer.
First off, everything seems to be working as expected, except the connection analyzer fails when I use a cert. Maybe I am missing something.
I created the CMG cert by duplicating the web server cert and importing into the SCCM server. I also have the ROOTCA
What cert am I supposed to use? I keep getting an error message "This certificate does not contain the private key" If I select Certificate store, it works, but gives errors?
You can check in ccmmessaging.log to check for the communication from the client side. Maybe you already have client auth cert enrolled before cmg was implemented.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(112.00000000000001, 34%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAD%3C/text%3E%3C/svg%3E)
Hi there,
I'm having the same issue as yourself, but I'm also experiencing issues with the cmg connection point not connecting, wondering if you had this issue too?
I can't see anything in the logs to point to a proxy error or any errors at all in fact, it's super weird.