SCEP Definitions not updating | MECM 2002 | ADR

Question

Hello Team,

Greetings for the day and hope you all are staying safe.
Query is about SCEP:

Few servers in infra not updating SCEP definition. About the setup:

Version : MECM 2002. Clients running latest agent.

MP : 4, DP : 50, SUP : 2 (1 HTTP and 1 HTTPS). FSP,

SCEP Update Order : 1st fetch from SCCM and if update not available then fall back to SCEP MS update catalog.

Total Servers 3600, Problem with 100. Sometime updating automatically after 4 days and sometimes not updating at all. All on Prem.

Sometime a simple “Update Definition” does the work and sometimes reboot fixes,
Few genuine servers get fixed after “MpCmdRun.exe -RemoveDefinitions [-All] or -RestoreDefaults or -SignatureUpdate “
There are not much information available on google too apart from the generic MS article https://docs.microsoft.com/en-us/mem/configmgr/protect/deploy-use/troubleshoot-endpoint-client

and the one from Henrik Hoe.

https://blog.ctglobalservices.com/configuration-manager-sccm/heh/configuration-items-and-baselines-example-scep-client-compliance/

If any script available to repair SCEP agent (If corrupted), trigger MpCmdRun.exe -RemoveDefinitions [-All] or -RestoreDefaults or -SignatureUpdate “

and fix registry values and update definitions if older then 1 day?. Configuration Item to detect and repair available? reset the state message only for SCEP and resend it? Not restricting myself for anything and all methods can be tested. Thanks a lot in Advance.

solved 1
Deepak Rai 2 months 3 Answers 108 views Admin 1

Answers ( 3 )

  1. It seems better to raise a support case with Microsoft and don’t forget to share the resolution here

  2. This is so complex question… it seems no one has answers

Leave an answer

Sorry, you do not have a permission to answer to this question .