Symptoms
When adding the a new ECS for Control Compliance Suite (CCS) for Windows, a message appear "Secure Channel for the computer {COMPUTER_NAME.EN_US} is broken 1311".
The computer's secure channel with the domain is broken.
Follow these steps to resolve the issue:
1. Remove (disjoin) the target computer that will host the ECS from the Domain.
2. Remove, then re-add the computer account from AD Users and Computers.
3. Restart the target computer, then join it back to the domain.
4. Install the ECS again.
NOTE: This process requires a local computer account with administrator rights on the target computer. It also requires a domain account with permission to join computers to the domain.