Connectivity issues may occur when the Baltimore CyberTrust Root certificate is not installed on client computers that use Windows Intune

Article translations Article translations
Article ID: 2831435

Applies to

This article applies to the following:
  • Windows Intune
Expand all | Collapse all

Symptoms

Connectivity issues may occur on client computers when the following conditions are true:
  • The client computers use Windows Intune and have the automatic root certificate mechanism disabled.
  • The Baltimore CyberTrust Root certificate is not installed.

Resolution

To resolve this problem when the automatic root certificate update mechanism is disabled on a client computer, install the latest root certificates to make sure that the client computer is up to date and secure.

You can use the Microsoft Update Catalog to find the latest root certificate updates. You can search for "root update" or the Microsoft Knowledge Base article number for the Windows Root Certificate Program (KB931125) and then download the latest root update package. Root update packages are cumulative. Therefore, you have to install only the latest package to receive all root certificates in the program.

For more information about the root certificate program and about other ways to install the package, click the following article number to view the article in the Microsoft Knowledge Base:  
931125 Windows Root Certificate Program members 

More information

Microsoft maintains the list of root certificates that are distributed by the Windows Root Certificate Program on the program website. For more information about the Windows Root Certificate Program and the list of certification authorities (CAs) who are members, see Windows and Windows Phone 8 SSL Root Certificate Program (Member CAs).

Root certificate update mechanisms are available in different versions of Windows. This includes the automatic root update mechanisms. For more information about how to update the root certificate list in different versions of Windows, click the following article number to view the article in the Microsoft Knowledge Base:
931125 Windows Root Certificate Program members  
By default, the automatic root update mechanism is enabled in different versions of Windows. However, if this mechanism is disabled, and if the clients do not have the Baltimore CyberTrust Root certificate installed, connectivity issues with Windows Intune may occur. Clients may no longer be able to access the Windows Intune infrastructure to receive updates, policies, and other such resources. Therefore, the clients may no longer be up to date and secure. New enrollments on such clients may also have issues.

For more information about Windows Intune and resources that are available to the clients by using Windows Intune, see Windows and Windows Phone 8 SSL Root Certificate Program (Member CAs).


Properties

Article ID: 2831435 - Last Review: April 1, 2013 - Revision: 1.0
Keywords: 
kbexpertiseinter kbprb kbsurveynew KB2831435

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com