Share via

Clients showing online than offline

haZ 31 Reputation points
2021-01-22T19:41:31.59+00:00

Dears ,
i have a weird issue i hope you can help me with .
i have some clients that shows online and healthy ( green icon ) when i restart the ccmexec service than after some minutes they turn back offline .

Error: Server certificate retrieved in TLS is not an exact match of the current MP encryption certificate.

Error: 0x80041002 authenticating server credentials!
BgbAgent
Failed to signin bgb client with error = 80041002.

did any one face such issue before ? i have the latest version installed .

Microsoft Security | Intune | Configuration Manager | Other

3 answers

Sort by: Most helpful
  1. Naman Puneet 1 Reputation point
    2026-03-24T12:05:56.3033333+00:00

    I ran into the same error. There are two steps I had to execute.

    Confirm that the computer authentication certificate chain of the client and the SCCM primary server are the same.

    In my case it was different. Reason, a new CA was introduced in the environment which was now issuing the client certificate. This new CA was co-existing with the old CA at this time.

    From the client certificate (the one with the new cert) , I exported the Root separately. I also exported the entire chain.

    The root was in the .cer format and I added it under client communication in site properties under administration.

    The chain I imported on the SCCM server.

    The server continues to function with the cert from the old CA but now has the capability to authenticate communication from clients which are getting the cert from the new CA.

    Hope this helps.

    0 comments No comments

  2. Simon Ren-MSFT 40,386 Reputation points Microsoft External Staff
    2021-01-27T08:52:52.107+00:00

    Hi,

    Thanks for your reply.

    When the issue occurs, if there is any further information in the CcmNotificationAgent.log and locationservices.log? Please also try the following actions:

    1.If possible, please remove the anti-virus on the client to have a try.
    2.Please run the command to repair SCCM Client to have a try. Refer to:
    Remote Repair SCCM Client

    Best regards,
    Simon


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

  3. Simon Ren-MSFT 40,386 Reputation points Microsoft External Staff
    2021-01-25T07:30:31.237+00:00

    Hi,

    Thanks for posting in Microsoft MECM Q&A forum. May we know if the offline clients get back to healthy green icon after a period of time?

    SCCM client communicates to its MP every 15 minutes to confirm it’s still online. In simple words, when your client is NOT showing as ONLINE in SCCM console then, we may have a problem with the fast notification communication channel. BGB refers to the fast notification communication channel component. There are three components in SCCM CB fast channel notification:

    1.Notification manager will be located along with site servers (Primary/Secondary). BGBmgr.log is the log file which will give more details about notification manager.
    2.Notification server will be located along with Management Point (MP) and in secondary sites. BGBServer.log is the log file to review at this step which is on the MP setup directory or site server setup directory.
    3.Notification Agent is fast channel notification component at SCCM client end. CcmNotificationAgent.log and locationservices.log are the log files on the SCCM client device to review on this step.

    Please make sure the TCP (port 10123) or HTTP (port 80) is listening and the CCM Notification Agent on the problematic SCCM clients are enabled.

    Best regards,
    Simon


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.