I'm installing a cloud management gateway for an environment that have all machines Hybrid azure AD joined.
Can I still deploy CMG but not enable "HTTPS" for the management point? I want keep it HTTP so I don't need to publish a cert for clients.
If the answer is no and I need to enabled HTTPS for the management point , so that means I need to make sure all machines have the client cert , right ?
Yes, you can use enhanced HTTP - see https://docs.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/enhanced-http
@Immer
Thank you for posting in Microsoft Q&A forum.
Like Nick said, enhanced HTTP is an alternatives for CMG.
If you enabled HTTPS for the management point, you may use GPO to make all machines have the client certs.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
5 people are following this question.
