A PXE enabled distribution point that uses a self-signed certificate generates many files

This article provides a solution for the issue that a PXE enabled distribution point (DP) generates many files if it uses a self-signed certificate in System Center 2012 Configuration Manager.

Original product version:   System Center 2012 Configuration Manager
Original KB number:   2713467


A PXE enabled DP will generate a number of files under C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18 for each PXE request that it services on the network. This issue occurs whether the device sending the PXE request has a task sequence deployed to it or not. The generation of files will continue and may consume available hard disk space.


This issue occurs whenever a self-signed certificate is used for the DP.


To work around this problem, request a CA issued certificate for the PXE enabled DP and specify the PFX file under the properties of the DP. Step-by-step instructions on how to do create the PFX file are available in Deploying the Client Certificate for Distribution Points.