When trying to convert internal existing clients to Cloud-enabled Management (CEM), the conversion fails even with CEM infrastructure in place. CEM communications work properly when installing new agents with an offline CEM package.
Existing clients communicate properly with the Notification Server (NS) using HTTPS and receive the CEM policy however when clients are restarted and try to convert themselves to be CEM enabled, errors are generated in the agent logs.
All certificates are set up correctly both on the server and the gateway but the
Some of the sections that you need to add may look like this:
<system.webServer><handlers accessPolicy="Read, Script"/>
<security><access sslFlags="Ssl, SslNegotiateCert, SslRequireCert"/>
Restart IIS on the NS, then restart the SMA service on effected clients. Clients should now be able to convert to CEM and get certificates properly.
If the behavior persists, another potential cause is TECH216365.
SMP 7.5+ (upgrade from 7.1)