Home
%3CLINGO-SUB%20id%3D%22lingo-sub-324553%22%20slang%3D%22en-US%22%3EHotfix%20Available%3A%20Microsoft%20Intune%20connector%20certificate%20does%20not%20renew%20in%20Configuration%20Manager%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-324553%22%20slang%3D%22en-US%22%3E%3CDIV%20class%3D%22lia-message-subject-wrapper%20lia-component-subject%22%20style%3D%22box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20font-size%3A%2014px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%22%3E%0A%3CDIV%20class%3D%22MessageSubject%22%20style%3D%22box-sizing%3A%20border-box%3B%20font-family%3A%20%26amp%3Bquot%3B%22%3ECopied%20from%20MC172272%20and%20the%20ConfigMgr%20support%20blog%3A%20%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Ftechcommunity.microsoft.com%252Ft5%252FConfiguration-Manager-Blog%252FHotfix-Available-Microsoft-Intune-connector-certificate-does-not%252Fba-p%252F324523%26amp%3Bdata%3D04%257C01%257Ccacamp%2540microsoft.com%257Cb61e42bb34b741fc1e8508d68169ba07%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C636838688443226845%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C-1%26amp%3Bsdata%3DhDAnhANNhc8KkE2aFvWhHYSrsrZWTLFeZahiYLCT3Zw%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FConfiguration-Manager-Blog%2FHotfix-Available-Microsoft-Intune-connector-certificate-does-not%2Fba-p%2F324523%3C%2FA%3E%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3CDIV%20class%3D%22lia-message-body-wrapper%20lia-component-message-view-widget-body%22%20style%3D%22box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20font-size%3A%2014px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20margin-bottom%3A%2010px%3B%20margin-top%3A%2010px%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%22%3E%0A%3CDIV%20class%3D%22lia-message-body%22%20id%3D%22bodydisplay%22%20style%3D%22box-sizing%3A%20border-box%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20font-size%3A%2016px%3B%20font-weight%3A%20300%3B%20line-height%3A%201.7142%3B%20margin-bottom%3A%2010px%3B%20overflow%3A%20auto%3B%20overflow-wrap%3A%20break-word%3B%20white-space%3A%20normal%3B%22%3E%0A%3CDIV%20class%3D%22lia-message-body-content%22%20style%3D%22box-sizing%3A%20border-box%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20font-size%3A%2016px%3B%20font-weight%3A%20300%3B%20line-height%3A%201.7142%3B%20margin-bottom%3A%2010px%3B%20overflow-wrap%3A%20break-word%3B%20white-space%3A%20normal%3B%22%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20margin-bottom%3A%200px%3B%20margin-left%3A%200px%3B%20margin-right%3A%200px%3B%20margin-top%3A%200px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20margin-bottom%3A%200px%3B%20margin-left%3A%200px%3B%20margin-right%3A%200px%3B%20margin-top%3A%200px%3B%22%3EAfter%20you%20update%20to%20Microsoft%20System%20Center%20Configuration%20Manager%20current%20branch%2C%20version%201806%20or%201810%2C%20the%20Microsoft%20Intune%20connector%20certificate%20renewal%20process%20fails.%20This%20problem%20affects%20customers%20who%20have%20a%20hybrid%20mobile%20device%20management%20environment%20through%20Microsoft%20Intune.%20The%20problem%20occurs%20when%20the%20Service%20Connection%20Point%20is%20installed%20on%20a%20computer%20that%20is%20running%20Windows%20Server%202012%20or%20Windows%20Server%202012%20R2.%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20margin-bottom%3A%200px%3B%20margin-left%3A%200px%3B%20margin-right%3A%200px%3B%20margin-top%3A%200px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20margin-bottom%3A%200px%3B%20margin-left%3A%200px%3B%20margin-right%3A%200px%3B%20margin-top%3A%200px%3B%22%3EA%20hotfix%20(%3CA%20style%3D%22background-color%3A%20transparent%3B%20box-sizing%3A%20border-box%3B%20color%3A%20%23146cac%3B%20text-decoration%3A%20underline%3B%22%20href%3D%22https%3A%2F%2Faka.ms%2FIT172144_hotfix%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EKB%204487960%2F4487997%3C%2FA%3E)%20to%20prevent%20this%20problem%20is%20now%20available%20in%20the%20Updates%20and%20Servicing%20node%20in%20the%20Configuration%20Manager%20console%20only%20for%20sites%20that%20use%20a%20hybrid%20mobile%20device%20management%20environment%20through%20Microsoft%20Intune.%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20margin-bottom%3A%200px%3B%20margin-left%3A%200px%3B%20margin-right%3A%200px%3B%20margin-top%3A%200px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20margin-bottom%3A%200px%3B%20margin-left%3A%200px%3B%20margin-right%3A%200px%3B%20margin-top%3A%200px%3B%22%3E%3CSTRONG%20style%3D%22box-sizing%3A%20border-box%3B%20font-weight%3A%20bold%3B%22%3EHow%20does%20this%20affect%20me%3F%3C%2FSTRONG%3E%3CBR%20style%3D%22box-sizing%3A%20border-box%3B%22%20%2F%3EIf%20you%20don't%20apply%20this%20hotfix%2C%20any%20changes%20or%20updates%20to%20user%20profiles%20will%20not%20be%20enforced%20on%20hybrid-managed%20devices.%20All%20existing%20policies%20are%20still%20enforced.%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20margin-bottom%3A%200px%3B%20margin-left%3A%200px%3B%20margin-right%3A%200px%3B%20margin-top%3A%200px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20margin-bottom%3A%200px%3B%20margin-left%3A%200px%3B%20margin-right%3A%200px%3B%20margin-top%3A%200px%3B%22%3E%3CSTRONG%20style%3D%22box-sizing%3A%20border-box%3B%20font-weight%3A%20bold%3B%22%3EWhat%20action%20do%20I%20need%20to%20take%3F%3C%2FSTRONG%3E%3CBR%20style%3D%22box-sizing%3A%20border-box%3B%22%20%2F%3EApply%20the%20hotfix%20as%20described%20in%20the%20%3CA%20style%3D%22background-color%3A%20transparent%3B%20box-sizing%3A%20border-box%3B%20color%3A%20%23146cac%3B%20text-decoration%3A%20underline%3B%22%20href%3D%22https%3A%2F%2Faka.ms%2FIT172144_hotfix%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EKB%20article%3C%2FA%3E%20as%20soon%20as%20possible.%20If%20the%20certificate%20expires%20before%20the%20hotfix%20is%20installed%20it%20will%20not%20be%20automatically%20renewed.%20Further%20manual%20steps%20will%20be%20required%20to%20re-establish%20communication%20between%20hybrid%20Intune%20and%20Configuration%20Manager%20if%20this%20occurs.%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20margin-bottom%3A%200px%3B%20margin-left%3A%200px%3B%20margin-right%3A%200px%3B%20margin-top%3A%200px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20margin-bottom%3A%200px%3B%20margin-left%3A%200px%3B%20margin-right%3A%200px%3B%20margin-top%3A%200px%3B%22%3E%3CSTRONG%20style%3D%22box-sizing%3A%20border-box%3B%20font-weight%3A%20bold%3B%22%3EAdditional%20Information%3A%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20margin-bottom%3A%200px%3B%20margin-left%3A%200px%3B%20margin-right%3A%200px%3B%20margin-top%3A%200px%3B%22%3E%3CA%20style%3D%22background-color%3A%20transparent%3B%20box-sizing%3A%20border-box%3B%20color%3A%20%23146cac%3B%20text-decoration%3A%20underline%3B%22%20href%3D%22https%3A%2F%2Faka.ms%2FIT172144_hotfix%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Faka.ms%2FIT172144_hotfix%3C%2FA%3E%3C%2FP%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-324553%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20Known%20issue%20was%20posted%20as%26nbsp%3B%3CSTRONG%3EMC172272%3C%2FSTRONG%3E.%20Also%20copying%20over%20the%20blog%20post%20from%20ConfigMgr.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-324553%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eknown%20issue%20hybrid%20intune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E

 

After you update to Microsoft System Center Configuration Manager current branch, version 1806 or 1810, the Microsoft Intune connector certificate renewal process fails. This problem affects customers who have a hybrid mobile device management environment through Microsoft Intune. The problem occurs when the Service Connection Point is installed on a computer that is running Windows Server 2012 or Windows Server 2012 R2.

 

A hotfix (KB 4487960/4487997) to prevent this problem is now available in the Updates and Servicing node in the Configuration Manager console only for sites that use a hybrid mobile device management environment through Microsoft Intune.

 

How does this affect me?
If you don't apply this hotfix, any changes or updates to user profiles will not be enforced on hybrid-managed devices. All existing policies are still enforced.

 

What action do I need to take?
Apply the hotfix as described in the KB article as soon as possible. If the certificate expires before the hotfix is installed it will not be automatically renewed. Further manual steps will be required to re-establish communication between hybrid Intune and Configuration Manager if this occurs.

 

Additional Information:

https://aka.ms/IT172144_hotfix