question

JustinD-0124 avatar image
0 Votes"
JustinD-0124 asked JustinD-0124 answered

Device collection query based on PKI certificate

We are about to enable SSL in the environment and I want to confirm all clients have PKI issues certificates. I would like to build a query based on the all systems device collection to show clients that are missing a PKI certificate.
109386-image.png


When I start looking at the query options under Configuration Manager Client SSL Configurations I do not see anything that seems to target the certificate type
109400-image.png

Am I looking at the wrong attribute class?

mem-cm-general
image.png (6.9 KiB)
image.png (25.3 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

This is unrelated to Intune or identity manager; updating the thread tags to reflect that this is related to ConfigMgr.

0 Votes 0 ·
EswarKoneti-MVP avatar image
0 Votes"
EswarKoneti-MVP answered EswarKoneti-MVP edited

you can add a criteria in the collection to find the devices with PKI cert.
110376-image.png

OR

You can try the following WQL query (sub-selected) to get all clients with client cert type is PKI.

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.ResourceId in (select resourceid from SMS_CombinedDeviceResources where SMS_CombinedDeviceResources.ClientCertType="2")

1= self signed cert
2= PKI cert

Regards,
Eswar
www.eskonr.com
If the response is helpful, please click "Accept Answer" and upvote it.



image.png (2.9 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JustinD-0124 avatar image
0 Votes"
JustinD-0124 answered

Thanks @EswarKoneti-MVP ! This is exactly what I was looking for. Your blog is very helpful btw :)

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.