Deploying System Center Configuration Manager Client over the Internet

December 30, 2015   //   Microsoft System Center

Microsoft offers a number of methods for deploying the System Center Configuration Manager (SCCM) client. One challenge has been deploying the client over the Internet without the use of VPN, otherwise known as Internet-based client management (IBCM). As more IT services are published to the Internet, clients are less likely to connect to the corporate VPN. This makes the installation of the SCCM clients complex, especially when it comes to environment migration scenarios. SWC consultants have found the right combination of ccmsetup switches makes it possible to install the SCCM client over the internet.

System-Center

How to Install the SCCM Client over the Internet

For this example we’ll be using the manual installation method. Please note – it’s important that the environment is working correctly over the Internet before proceeding.

1. First you will need to gather some files that will be used during the client installation

  • Open Program FilesMicrosoft Configuration Managerbini386MobileClient.tcf and copy the value of SMSPublicRootKey into a text file named ibcm.key
  • From the MMC Certificate console, export the “Site Server Signing Certificate” public key to ibcm.cer

2. Now you’re ready to install the client with the following switches:

ccmsetup.exe /NoService /UsePKICert /NoCRLCheck /ForceInstall CCMFIRSTCERT=1 RESETKEYINFORMATION=TRUE SMSSIGNCERT=ibcm.cer SMSROOTKEYPATH=ibcm.key SMSSITECODE= CCMHOSTNAME= SMSMP=https:// DNSSUFFIX=

Note: Replace the items in bracket with your specific environment values.

3. Then you will need to wait at least 10 minutes for the client to pull down all of the policies. If the client is failing to initialize and pull down the policies you can run a ccmrepair, but typically this should not be needed.

Note: If you are using this in a migration scenario you will want to make sure to run the following prior to the steps mentioned above.

C:Windowsccmsetupccmsetup.exe /uninstall

RD /s /q “%WINDIR%CCM”
RD /s /q “%WINDIR%CCMSetup”
RD /s /q “%WINDIR%ccmcache”
DEL /q “%WINDIR%SMSCFG.ini”

“%WINDIR%reg.exe” DELETE “HKLMSOFTWAREMicrosoftCCM”
“%WINDIR%reg.exe” DELETE “HKLMSOFTWAREMicrosoftCCMSetup”
“%WINDIR%reg.exe” DELETE “HKLMSOFTWAREMicrosoftSMS”

NET STOP “Winmgmt” /yes && NET START “Winmgmt”

Microsoft System Center Consulting at SWC

At SWC, our System Center experts fully immerse themselves in your business processes so that you get a right-sized solution that makes sense for your business. Plus, you’ll free up your internal IT team to work on more strategic initiatives. Contact us today to get started.

Microsoft System Center Solutions

Watch our video below to learn more about Microsoft System Center 2012 R2.