You should not migrate the site mode from mixed mode to native mode until you are sure the site is correctly provisioned with the following:
- The required public key infrastructure (PKI)
certificates. For more information, see Certificate Requirements
for Native Mode.
- A custom Web site if the default Web sites
are being used for anything other than Configuration Manager 2007.
For more information, see Configuration Manager
Custom Web Site Overview.
- You have verified that there are no
SMS 2003 clients assigned to the site and the site does not
contain clients running Microsoft Windows 2000 Professional.
For more information, see Configuration Manager
Supported Configurations.
Additionally, if the site contains clients that cannot read site settings published in Active Directory Domain Services, you must also have the following in place:
- An external mechanism such as Group Policy or
a script to instruct clients to migrate over to native mode
communication.
- A server locator point for the hierarchy if
you are using a network load balanced management point.
- An external mechanism such as Group Policy or
a script to run CCMSetup.exe with command-line options if you need
to configure clients with the client settings specified in the
Site Properties:
Site Mode Tab. These options are the following:
- Enable CRL checking on clients
- Allow HTTP communication for roaming and
site assignment
- Certificate store
- Certificate selection criteria
- Enable CRL checking on clients
It is optional, but recommended, that you have a fallback status point installed in the site and that clients are assigned to it. The fallback status point can help you identify clients that cannot communicate with their management point (and so are unmanaged) when the site is operating in native mode. For more information, see About the Fallback Status Point in Configuration Manager.
Caution |
---|
The migration process that Configuration Manager 2007 undergoes when you perform this procedure can take some time to complete, and for a sustained period of time, clients might not be able to communicate with the site. Therefore, plan to perform this procedure during a quiet period when it is acceptable that the site will be unavailable because of maintenance downtime. |
To migrate the site mode from mixed mode to native mode:
-
In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database / Site Management.
-
Right-click <site code> - <site name> and then click Properties.
-
On the Site Mode tab in the site properties dialog box, select Native mode.
-
In the Site server signing certificate section, click Browse to view the available certificates on the site server's local store in the Available Certificates dialog box. Select the site server signing certificate that contains the site code in the Issued to field and includes Document Signing in the Intended Purpose field. Then click OK to close the Available Certificates dialog box.
-
If you are unable to browse to the site server's certificate store, you can manually enter the certificate's thumbprint in the Thumbprint text box. Configuration Manager will attempt to match the thumbprint to a certificate, and if this is successful, the certificate friendly name will be displayed in the Thumbprint field. If Configuration Manager is unable to match the thumbprint to a certificate, you will be prompted to choose whether you want to continue.
-
When you have either selected the certificate or entered the thumbprint, click OK to close the site properties dialog box.
Note For more information about the options in this dialog box, see Site Properties: Site Mode Tab.
See Also
Tasks
How to Configure HTTP Communication for Roaming and Site AssignmentHow to Enable or Disable Certificate Revocation Checking (CRL) on Clients
How to Specify the Client Certificate Selection Criteria
How to Specify the Client Certificate Store
How to Verify Native Mode Migration Is Complete
Concepts
Administrator Checklist: Migrating a Site to Native ModeAdministrator Workflow: Migrating a Site to Native Mode
Certificate Requirements for Native Mode
Configuration Manager Custom Web Site Overview
Determine If You Need to Specify Client Certificate Settings (Native Mode)
Determine If You Should Install a Fallback Status Point for Configuration Manager Clients