Article ID: 2142221 - View products that this article applies to.
In some situations, an administrator of System Center Mobile Device Manager 2008 (SCMDM) must manually request a Gateway Configuration Management (GCM) certificate from the Certificate Authority's (CA) web enrollment page. If the server hosting the web enrollment page has been updated with the hotfix described in Knowledge Base article KB922706, the option to "Store certificate in the local computer certificate store " will not appear.
The hotfix changes the web enrollment page to support clients using Windows Vista, Windows Server 2008, Windows 7 and later clients. The underlying ActiveX control invoked by the "Store certificate in the local computer certificate store" checkbox no longer runs when the fix is applied, even if the client requesting the certificate is running an OS prior to Windows Vista.
1) One workaround would be to install only the web enrollment tool on a server hosting IIS, and pointing to the issuing CA currently used by SCMDM. Do not install the hotfix for 922706 on this server. The "Store certificate in the local computer certificate store " checkbox should be available.
Note: If the web enrollment tool has been installed on a server hosting IIS that does not have the hotfix, but points to an issuing CA other than the one previously used by SCMDM, the certificate for the issuing CA must also be installed on any server receiving a certificate from the web enrollment tool.
2) An alternate workaround, if option 1 is not available:
Note: You will have to complete the Provide Network Service Permissions to the Certificate section of the Manual Certificate Procedures chapter after completing this workaround.
(http://go.microsoft.com/fwlink/?LinkId=151500)for other considerations.