While implementing certificates in my Configuration Manager 2012 lab I came across a couple of certificate issues. I was not able to install Configuration Manager Clients and the enrollment of devices was not stable.
Issue1 : MP and DMP not responding to HTTP requests
MP Control Manager detected DMP is not responding to HTTP requests. The http error is 2147500037.
Possible cause: DMP service is not started or not responding on all DMP
physical machines.Solution: Manually restart the SMS Agent Host service on the DMP.
Possible cause: IIS service is not responding.
Solution: Manually restart the W3SVC service on the MP.
For more information, refer to Microsoft Knowledge Base article 838891.
Fix: change the template for client authentication where is said “Subject Name” must be Common, use Fully
distinguished name instead of Common. The Client Authentication Certificate must also be installed on the Management Point Site Server.
After fixing above, the client was pushed and was able to communicate with the primary site, like shown in the picture below.
Issue 2: Enrollment Web Component and Enrollment Service not responding to HTTP requests
Enrollment Web Control Manager detected Enrollment Web Component is not responding to HTTP requests. The http error is 2147500037.
Possible cause: IIS service is not responding.
Solution: Manually restart the W3SVC service on the ENROLLWEB.
For more information, refer to Microsoft Knowledge Base article 838891.
______________
Enrollment Server Control Manager detected Enrollment Service is not responding to HTTP requests. The http error is 2147500037.
Possible cause: IIS service is not responding.
Solution: Manually restart the W3SVC service on the ENROLLService.
For more information, refer to Microsoft Knowledge Base article 838891.
Fix for me was installing the Client Authentication Certificate on the Management Point Site Server.