Blog Post

Device Management in Microsoft
3 MIN READ

Secure AND Easy Service Account Management

SqlBenjamin's avatar
SqlBenjamin
Icon for Microsoft rankMicrosoft
Mar 21, 2020
Like most companies, we have various automations and tools we use to do everything it takes to run Microsoft Endpoint Manager Configuration Manager (a.k.a. MEMCM, MECM, SCCM, System Center Configurat...
Updated Mar 21, 2020
Version 1.0
nbuck2480's avatar
nbuck2480
Copper Contributor
May 28, 2020

SqlBenjamin Once you create the gmsa do you need to add the gmsa to the SQL database folder security permissions with full control?   I am getting the following error in the Config Mgr setup log:

 

INFO: SQL Connection succeeded. Connection: SMS ACCESS, Type: Secure $$<Configuration Manager Setup><05-27-2020 13:02:04.700+360><thread=980 (0x3D4)>
Create_BackupSQLCert : SQL server failed to backup cert. $$<Configuration Manager Setup><05-27-2020 13:02:14.888+360><thread=980 (0x3D4)>
CSiteControlSetup::SetupCertificateForSSB : Failed to create/backup SQL SSB certificate. $$<Configuration Manager Setup><05-27-2020 13:02:14.888+360><thread=980 (0x3D4)>
ERROR: Failed to set up SQL Server certificate for service broker on "SQL.server.fqdn" . $$<Configuration Manager Setup><05-27-2020 13:02:14.888+360><thread=980 (0x3D4)>
ERROR: Failed to initialize the site control data. $$<Configuration Manager Setup><05-27-2020 13:02:14.888+360><thread=980 (0x3D4)>

I switched out the "SQL.server.fqdn" for security purposes.  It is the fqdn of our sql server which is separate fro the SCCM server.

Appreciate the help!