MEMCM - IIS Issues

[CHiLL]

Our IIS certificate had expired on the MEMCM server, stopping clients communicating (only found out as we saw baselines were not being received on machines and machines were appearing offline in the console, despite the client communicating with the server). I have followed my previous instructions to renew and apply the new certificate, which went smoothly. Clients are now appearing online in the console and baselines are being received.

 

However, when I attempt to access https://fqdn.server/sms_mp/.sms_aut?mplist, I'm getting "Hmmm... can't reach this page" and "The connection was reset". It appears to be the same for all sms_mp sites. Although, the CM MBAM site (https://FQDN.server/HelpDesk/), also on the same IIS instance is working correctly. The MP and DP are configured to connect via HTTPS and the PKI is specified/correct as far as I can tell. IIS also appears to be configured correctly. If I attempt to connect via HTTP, I get error "403 - Forbidden: Access is denied.", which I think I expect, as it's supposed to use HTTPS.

 

Site Status and Component Status are all reporting healthy.

 

I'd like to try and resolve this, as I don't know what other knock on effects it may have to MEMCM. I've exhausted my knowledge and tried the things I can find online.

 

I have noticed that the IIS site lives in E:\Program Files\SMS_CCM\SMS_MP, but the folder is empty. Can anyone check their folder and see if it has contents?

Edited August 2, 2022 by CHiLL

[psydii]

This is definitely the sort of problem I'd burn £220 on with a call to Microsoft Support.

 

That said I have a horrible feeling this is related to the DCOM changes that occurred recently.

[psydii]

To answer your specific question though, we have a web.config file in that folder.

 

(this post was delayed because cloudflare prevented me from posting anything after the above yesterday. Thanks @localzuk and @Dos_Box helping me out!)

Edited August 4, 2022 by psydii