Share via

How to install SCCM Cloud Management Gateway

Maurer, Ronald J 0 Reputation points
2025-11-03T19:01:01.43+00:00

Trying to build SCCM CMG. THe VM Machine Scale set fails to provision. Certificate is valid, and I am using GLobal Admin to complete the process. Why is this failing?

Windows for business | Windows Client for IT Pros | Devices and deployment | System management components
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. HLBui 2,435 Reputation points Independent Advisor
    2025-11-03T21:44:05.3033333+00:00

    Hi Maurer Ronald J,

    Based on your description, this issue often occurs when the CMG service is missing required permissions on the Azure subscription, or when the Azure Resource Provider for Microsoft.Compute isn’t properly registered. Even with Global Admin rights, the account also needs contributor or owner access on the target subscription/resource group where the CMG is being deployed. I recommend verifying these permissions, then confirming that the Azure AD app registration used for the CMG setup has the correct API permissions and secret validity. Additionally, please ensure that your CMG region matches your Azure subscription region and that the certificate chain is fully trusted by Azure.

    Once these checks are complete, try redeploying the CMG and the VM Scale Set should provision successfully.

    I hope this information is useful.. If it is, don't forget to "Accept the answer" so that others could benefit too. Thank you :)

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.