Configure Cloud Management Gateway - ConfigMgr (SCCM/MEMCM) Lab Tutorial

[@SK-zv5fq]

Great video. We have a Hybrid application package deployment, if on the interent use CMG for deployment to device and if in the office use the on premise MECM servers for deployment. The problem we are having is CMG is not deploying applications and after a period of timeouts and uses on premise MECM servers for deployment, if you in the office that timeout seems to be approx 2 hours before application are deployed from MECM and remote using VPN that timeout appears to be after 4 days. Apart from the reason as to why its not deploying from CMG, do you know why such a big timeout difference from office and VPN, is there a setting in MECM or CMG that causing this or is it something else?

[@amarshaurya9878]

❤❤❤What an Awesome and easy explanation of Setting up CMG from scratch 🎉.....thanks for all your effort making this video 📸

[@meanwhileonearth1039]

Fantastic Explanation! Thank you so much for creating this. Helped me a lot.

[@theCMC]

Great to hear it helped you out. Thanks for the feedback :-)

[@KefashWhite]

Not sure if something was missed at 6:19 but I was not seeing the certificate on my computer after I forced the GPUpdate. Should I have allowed Domain Computers to auto-enrol the certificate?

[@theCMC]

Hi! Yes, sorry - not sure how I missed that. You need to allow auto-enroll for computers you want to receive this cert. Ideally, you'd create a group and add computers to it, to avoid targeting servers accidentally.

[@KefashWhite]

@@theCMC awesome thanks for sharing? I’m actually not finished with the implementation. Your video is fast and helpful.

[@theCMC]

@@KefashWhite glad it helped. Let me know how you get on !

[@KefashWhite]

If my clients already use PKI and I already have Root CA specified at 18:53 do I need to setup certificates again or should I have just imported the original one when creating the Cloud Management Gateway?

[@theCMC]

You can use the existing certificates from your environment, most likely.

[@QuintenMarais]

Excellent Video ! How do I integrate the patch deployment so the patched can be directly downloaded from the internet instead of SCCM or CMG?

[@theCMC]

That’s simply Windows Update for Business. You can manage these policies via Intune or ConfigMgr.

[@karten58]

Clear 👍🤩 Thank you so much .

[@imranawan7908]

Nice video . very informative

[@davidbourgie2843]

Hello and Tks, your video is up to date, but i'm looking for more a very good deployment solution over the cloud (because we need to deploy windows 10 for peoples in some others country who's got no technicien support) so do you think SCCM-CB is still the best solution ? My company's project manager told me than SCCM is over now. With that video we should say not totaly anyway.

[@theCMC]

Configuration Manager will be here for a long time. It will mainly grow with cloud-attached features (not necessarily co-management). For most large organisations, ConfigMgr is the best solution, especially if they either a) rely on imaging existing tech as well as cloud-delivered new builds b) have existing skills and resources in ConfigMgr c) have a significant and complex environment That said, in my opinion, Hybrid AD (for devices) is not necessarily the best solution, and Azure AD Joined (possibly ConfigMgr co-managed) devices would be a much better step toward the future.

[@zed0k]

Was the Client Authentication Certificate Template missing from the video? My ConfigMgr server has the Server cert because its deployed to the ConfigMgr Servers group for enrollment, but my client is not getting the Client cert. I have the GPO created, but im guessing its not applying anything because the actual Client Auth Cert is missing.

[@WillianBuddySantos]

I was asking myself about this and yes, he's forgot. You can create the certificate like he created the CMG certificate and in the permissions you give permission to all computers autoenroll.

[@sandeeprai4462]

Hi, can you show us how to configure CMG using VMSS from config manager as new release SCCM version 2107 has this feature.

[@theCMC]

Great idea! I was planning to update the CMG demo following all the TP updates but didn’t get round to it. I’ll set something up :-)

[@theCMC]

Just finished the upgrade to 2107 (did a video too) so will be able to check out VMSS shortly.

[@theCMC]

Just uploaded :-) kzbin.info/www/bejne/pWGnpHytjqhqp7M

[@sandeeprai4462]

@@theCMC very nice , informative video ...Thank you

[@imranawan7908]

Can you also create a video on setup Cloud Management Gateway with Enhanced HTTP please . Thanks.

[@theCMC]

Yes! That's next on the list. Is the mix of explanation and screensharing good for you to follow?

[@imranawan7908]

@@theCMC Yes it was easy to understand. I looking forward setup Cloud Management Gateway with Enhanced HTTP as most companies not have a pki environment

[@theCMC]

Agreed. It’s a good alternative to managing a full PKI infrastructure. Video should be live next week!