question

YvesJiang-8567 avatar image
0 Votes"
YvesJiang-8567 asked TeemoTang-MSFT commented

MBAM clent cannot connect MBAM server issue

Hi
I deployed the MBAM, and client got the MDOP MBAM GP policy,
now met 2 issue :
1. client events: certificate issue
96125-image.png


  1. IIS certificate issue, I binging it ,
    96154-image.png


96164-image.png


windows-server-security
image.png (73.2 KiB)
image.png (178.1 KiB)
image.png (161.3 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

TeemoTang-MSFT avatar image
0 Votes"
TeemoTang-MSFT answered TeemoTang-MSFT commented

Please check whether there was no Root CA specified in the Client Computer Communications tab under Administration >> Sites >> Site (right click, properties-- the setting is at the bottom of the tab)

About IIS certificate issue, check this case for a hint
MBAM add SSL certificates retrospectively (microsoft.com)
https://social.technet.microsoft.com/Forums/en-US/75cef2da-7e34-4d53-85a6-e4095bc07ff4/mbam-add-ssl-certificates-retrospectively?forum=mdopmbam#295bd4a5-d163-4725-92a1-49e271af34b2


If the Answer is helpful, please click "Accept Answer" and upvote it.
Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

thank for your reply
The original setting was like that (https://social.technet.microsoft.com/Forums/en-US/75cef2da-7e34-4d53-85a6-e4095bc07ff4/mbam-add-ssl-certificates-retrospectively?forum=mdopmbam#295bd4a5-d163-4725-92a1-49e271af34b2)

and I can open the web mbam selfservice in client ,but cannot open the web in MBAM server, don't know why that

check the certificate between client and server is ok


96267-image.png
96331-image.png

from the client RSOP to see ,client got the policy .My understanding is that the client will force the user to encrypt the hard disk after getting the policy



0 Votes 0 ·
image.png (85.2 KiB)
image.png (111.6 KiB)

Cause analysis and log analysis is beyond scope of forums support so if further assistance were needed you could open a request ticket with Microsoft support.
https://support.serviceshub.microsoft.com/supportforbusiness

0 Votes 0 ·