SCEP Definitions not updating | MECM 2002 | ADR

Hello Team,

Greetings for the day and hope you all are staying safe.
Query is about SCEP:

Few servers in infra not updating SCEP definition. About the setup:

Version : MECM 2002. Clients running latest agent.

MP : 4, DP : 50, SUP : 2 (1 HTTP and 1 HTTPS). FSP,

SCEP Update Order : 1st fetch from SCCM and if update not available then fall back to SCEP MS update catalog.

Total Servers 3600, Problem with 100. Sometime updating automatically after 4 days and sometimes not updating at all. All on Prem.

Sometime a simple “Update Definition” does the work and sometimes reboot fixes,
Few genuine servers get fixed after “MpCmdRun.exe -RemoveDefinitions [-All] or -RestoreDefaults or -SignatureUpdate “
There are not much information available on google too apart from the generic MS article https://docs.microsoft.com/en-us/mem/configmgr/protect/deploy-use/troubleshoot-endpoint-client

and the one from Henrik Hoe.

https://blog.ctglobalservices.com/configuration-manager-sccm/heh/configuration-items-and-baselines-example-scep-client-compliance/

If any script available to repair SCEP agent (If corrupted), trigger MpCmdRun.exe -RemoveDefinitions [-All] or -RestoreDefaults or -SignatureUpdate “

and fix registry values and update definitions if older then 1 day?. Configuration Item to detect and repair available? reset the state message only for SCEP and resend it? Not restricting myself for anything and all methods can be tested. Thanks a lot in Advance.