MBAM BitLocker Client - Not launching

[CHiLL]

I have installed MBAM on our site and deployed the client to a test laptop. However the client is not launching. Checking the Event Viewer under Application abd Services Logs > Microsoft > Windows > MBAM > Admin...I get the following error when mbamclientui.exe is executed:

 

Error - Event ID 2
An error occurred while applying MBAM policies.
Volume ID:\\?Volume......................................................

Error code:
-2146762487

Details:
A certificate chain processed, but terminated in a root certificate which is not trusted by the provider.

The MBAM server is installed on the SCCM server (with SQL 2012)...MBAM server appears to be set up correctly.

I have checked the SQL Reporting Services Configuration and tried using the ConfigMgr SQL Server Identification Certificate (which binds fine), but the client produces the above error. I have also tried using a self-signed certificate by creating one from the IIS Server Certificates options.

 

Any ideas?

Edited May 3, 2018 by CHiLL

[CHiLL]

The issue was caused by using the server's self-signed certificate and the clients not trusting it. This was evident by browsing to the SSP/Helpdesk page for MBAM and checking the certificate in the browser. I issued a signed certificate from our on-site CA and assigned that within both IIS and the SQL Reporting Services and the devices were able to communicate and trust the MBAM server.