When a Configuration Manager 2007 site is configured for native mode, clients that fail to mutually authenticate with site systems will be unmanaged. Possible reasons for the failure include an expired certificate on the client, an invalid certificate, a certificate from an untrusted source, or a missing certificate.

Note
The certificates used in Configuration Manager 2007 native mode are managed externally to Configuration Manager 2007 and are dependent on your public key infrastructure (PKI) deployment. For more information, see Deploying the PKI Certificates Required for Native Mode.

If clients are assigned a fallback status point, they will send it state messages if they experience certificate issues, which are then relayed back to the site. To view these reported certificate issues when the site is configured for native mode, run the following reports that have the report category of Site - Client Information:

Important
If clients are not assigned a fallback status point, these reports will not contain any information.

To view these reports, follow this procedure.

To identify client certificate issues in native mode by running reports:

  1. In the administrator console, navigate to System Center Configuration Manager / Site Database / Computer Management / Reporting / Reports.

  2. In the Reports node, click the Category column to sort the reports so that you can more easily find the reports with the category Site - Client Information.

  3. Right-click one of the following reports, and then select Run:

    • Issues by incidence detail report for a specific collection

    • Issues by incidence summary report for a specific collection

    • Issues by incidence detail report for a specific site

    • Issues by incidence summary report

  4. In the Report Information page, supply any additional information required and then click Display to view the report.

  5. Close the report.

See Also