Cloud Management Gateway SCCM Certificate

Question

question

KunalMehra-6113 asked Nov 9, '20 Jason-MSFT answered Nov 9, '20

Cloud Management Gateway SCCM Certificate

We have got the certificate issued from Globalsign. When importing the certificate from SCCM console to install CMG..... the SCCM console crashes everytime. Screenshot attached... SCCM console crashes immediately after I fill in the password.

When checked the SmsAdminUI.log .... saw the below error...

[1, PID:14812][11/09/2020 07:23:46] :System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.NotSupportedException: The certificate key algorithm is not supported.

at System.Security.Cryptography.X509Certificates.PublicKey.get_Key()

at Microsoft.ConfigurationManagement.AdminConsole.AzureServices.CertificateInfoBase.LoadCertificateInfo(String certificateFilePath, SecureString password, Object owner)

Please let me know the algorithm requirement of CMG certificate and how to check my issued certificate for the same.

mem-cm-co-management

2020-11-06-18-42-46.png (158.2 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2020-11-09T16:50:32.343Z

Jason-MSFT answered Nov 9, '20

While the console shouldn't crash for this, the reason here is clearly stated in the error message: The certificate key algorithm is not supported.

You should file feedback in the console for the crash and acquire a certificate with a supported key algorithm (see the important note at https://docs.microsoft.com/en-us/mem/configmgr/core/plan-design/network/pki-certificate-requirements for details on the requirements for this cert).

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question