Comments on: How to install SCCM client agent on Mac Computers https://www.prajwaldesai.com/how-to-install-sccm-client-agent-on-mac-computers/ SCCM | ConfigMgr | Intune | Windows 11 | Azure Mon, 01 Mar 2021 11:37:26 +0000 hourly 1 https://wordpress.org/?v=6.4.1 By: Greg Palmer https://www.prajwaldesai.com/how-to-install-sccm-client-agent-on-mac-computers/#comment-17179 https://www.prajwaldesai.com/?p=12217#comment-17179 In reply to Michael Basso.

I’m kinda seeing this same issue. The root was placed into the System folder and is trusted if we use safari to navigate to an internal https server. I’ve tried all kinds of suggestions..Re-issued the mp certificate with CN in subject and DNS in Alternative Name. I’ve also reduced the validity period of the mac client certificate to 1 year per updated apple suggestions. Anyone have suggestions for this issue?

]]> By: Sergio Lara https://www.prajwaldesai.com/how-to-install-sccm-client-agent-on-mac-computers/#comment-10982 https://www.prajwaldesai.com/?p=12217#comment-10982 Disregard my comment, now im getting an enrollment error 0x80180026.

]]> By: Sergio Lara https://www.prajwaldesai.com/how-to-install-sccm-client-agent-on-mac-computers/#comment-10978 https://www.prajwaldesai.com/?p=12217#comment-10978 Hey
Thanks for this guide.
I have a quick question.
When i try to set up the profile the site code is blank, and when i try to pick a issuing cert authority the mac client cert doesnt come up.
Thank you!

]]> By: Sergio https://www.prajwaldesai.com/how-to-install-sccm-client-agent-on-mac-computers/#comment-10977 https://www.prajwaldesai.com/?p=12217#comment-10977 Hey
Thanks for this guide.
I have a quick question.
When i try to set up the profile the site code is blank, and when i try to pick a issuing cert authority the mac client cert doesnt come up.
Thank you!

]]> By: Brad Stossel https://www.prajwaldesai.com/how-to-install-sccm-client-agent-on-mac-computers/#comment-8478 https://www.prajwaldesai.com/?p=12217#comment-8478 Hi Prajwal…the link to the Macclient.dmg takes me to a page MS no longer supports. Also, when I attempt to get it from the Microsoft Download Center, it gives me a slew of other OS clients to choose from. When I select the ConfigmgrMacClient.msi and download it, the downloaded file extracts the Linux/Unix tar files. Not the Macclient.dmg. Do you have an alternate link to the macclient.dmg?

]]> By: joe goad https://www.prajwaldesai.com/how-to-install-sccm-client-agent-on-mac-computers/#comment-7128 https://www.prajwaldesai.com/?p=12217#comment-7128 Prajwal, I was able to install client, however, enrollment fails. HTTP response code is 500 Internal Server error. Which logs would I look to find an issue? Any assistance would be much appreciated.

]]> By: Michael Basso https://www.prajwaldesai.com/how-to-install-sccm-client-agent-on-mac-computers/#comment-7507 https://www.prajwaldesai.com/?p=12217#comment-7507 Thanks Prajwal,
The client installs and is successfully enrolled. However, when I click “Connect Now” from the Config Mgr client it shows the message “Certificate has untrusted root” (see pic). In the KwyChain Access I see it says “this certificate has custom trust settings” (see pic). Any ideas where I went wrong with my Certs?

]]> By: Mikey https://www.prajwaldesai.com/how-to-install-sccm-client-agent-on-mac-computers/#comment-6589 https://www.prajwaldesai.com/?p=12217#comment-6589 Hello Prajwal,

I followed the steps above along with setting up the PKI environment. I am able to enroll the Mac Clients and see them in System Center. However I saw this message in terminal:

No Preferences found for Key – ‘SignedSMSID’, Domain – ‘com.microsoft.ccmclient’.
No Preferences found for Key – ‘CCMAuthHeaderType’, Domain – ‘com.microsoft.ccmclient’.
No Preferences found for Key – ‘SignedCCMAuthHeaderType’, Domain – ‘com.microsoft.ccmclient’.
No Preferences found for Key – ‘ClientTimeStamp’, Domain – ‘com.microsoft.ccmclient’.
No Preferences found for Key – ‘SignedClientTimeStamp’, Domain – ‘com.microsoft.ccmclient’.

8470 bytes available:
4374 bytes available:
278 bytes available:

Importing trusted root certificate
Root certificate already added

Importing client auth certificate
Modifying ccmclient preferences…

Successfully enrolled.
In addition, the Mac Client is not able to connect via the “Connect Now” button. It will stay on the processing… for a very long time.

]]> By: Kenneth Dean https://www.prajwaldesai.com/how-to-install-sccm-client-agent-on-mac-computers/#comment-7372 https://www.prajwaldesai.com/?p=12217#comment-7372 In reply to Prajwal Desai.

Yeah I made sure all that was setup, but it still had issues, I played around with those settings quite a bit but nothing changed, I felt like it may be due to the fact that I did not update SCCM to the latest and greatest. I have now. I reinstalled and am working on the OSD TS first and then I will try again with this same site. If that doesn’t work I am going to bring up a separate server to enroll the MACs into. Thanks for all your suggestions.

]]> By: Prajwal Desai https://www.prajwaldesai.com/how-to-install-sccm-client-agent-on-mac-computers/#comment-6395 https://www.prajwaldesai.com/?p=12217#comment-6395 In reply to Kenneth Dean.

I would recommend these options to be configured under site properties.

1) Site system settings – HTTPS or HTTP – This allows the site system roles to use either HTTP or HTTPS communication.

2) Client Computer settings – Use PKI client cert when available – This check box allows clients that are PKI-enabled or not PKI-enabled to co-exist and be managed in the same site at the same time.

This provides a safe opportunity to check whether the site system roles and clients work with the HTTPS configuration. Because the site system roles still accept HTTP connections, all the clients remain managed. If a client has a valid PKI certificate and there are HTTPS site system roles available, these clients communicate over HTTPS. If a client does not have a valid PKI certificate, the client falls back to HTTP communication.

]]>