question

rakeshck-4752 avatar image
0 Votes"
rakeshck-4752 asked rakeshck-4752 edited

CMG with configutaion Manager v 2107 using CSP subscriptions

I have setup CMG with configuration Manager v2107 using CSP subscriptions and virtual machine scale set, I used Service Name + Deployment name same as xxxx.xxSOUTH.CLOUDAPP.AZURE.COM. do we need any public DNS or CN Name for this method? as i could see clients and ConfigMgr are start communicating without any DNS info? is it a recommend way? or something I'm missing. all my clients are windows 10 Azure Hybrid Joined. MP communication settings is enhanced HTTP.

Please advise
Thank You
Rck

mem-cm-generalmem-cm-application
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

RahulJindal-2267 avatar image
0 Votes"
RahulJindal-2267 answered rakeshck-4752 edited

If you are using azure deployment name then you don’t need a CNAME as it is owned by Microsoft and publicly routable.

Edit: This is as per Microsoft’s official technical documentation. Personally, I would create a CNAME.

· 6
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

If you are using azure deployment name the you don’t need a CNAME as it is owned by Microsoft and publicly routable.

While technically true (and supported even) this is a BAD idea. ALWAYS use a CName and always use a cert from a public CA for your CMG.

1 Vote 1 ·

Thanks @Jason-MSFT ....We already setup with azure deployment name. so, can we modify the configurations? or we have to rebuild the cloud service from the scratch? if we rebuild can we get /or used the same cloud domain like xxxx.xxSOUTH.CLOUDAPP.AZURE.COM as its already created? also what could be the impact if we are continue without CName?

0 Votes 0 ·

Unfortunately, your question is far too ambiguous to answer. I have no idea what you currently have configured so can't tell you what you can or should do. The CMG service name always starts with and is based on the name in your server certificate. What subject name is in your certificate?

0 Votes 0 ·
Show more comments