Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Fix SCCM Failed to Create SQL Always On Certificate Error

Fix SCCM Failed to Create SQL Always On Certificate Error

Written By Anoop C Nair
Last Updated September 6, 2024
Posted In SCCM
SHARE

Let’s see how to fix the error “failed to create SQL Always On certificate ConfigMgr 2103.” Today, I’d like to explore fixing the SCCM that failed to create an SQL Always On Certificate Error.

Microsoft released a new out-of-band hotfix, KB10216365, for SCCM 2103. This KB fixes the problem of being unable to move the site database to the SQL Always On availability group.

The previous post documented SCCM 2103 known issues. The update rollup for Configuration Manager 2103 is a prerequisite for out-of-band hotfix KB10216365.

Out-of-band hotfixes will not be available in the SCCM console until you download and install the Update Registration Tool to import hotfixes to Configuration Manager.

Patch My PC

Issue Fix SCCM Failed to Create SQL Always On Certificate Error

Modifying SQL Server configuration to move the site database to an availability group fails after upgrading to SCCM CB version 2103. The following error can be seen in the ConfigMgrSetup.log file on the affected SCCM site server.

Not able to decrypt using key stored in operating system.
Successfully refreshed the encrypted site master key from database.
ERROR: Failed to retrieve SQL Server certificate.
ERROR: Failed to create SQL Always On certificate.

Download

You can download the out-of-band update registration tool for KB10216365. You can download KB10216365 out-of-the-band update registration tool (CM2103-KB10216365.ConfigMgr.Update.exe).

Install CM2103-KB10216365.ConfigMgr.Update.exe from the SCCM server to make the KB10216365 available.

Fix SCCM Failed to Create SQL Always On Certificate Error - Fig.1
Fix SCCM Failed to Create SQL Always On Certificate Error – Fig.1

Fix: Failed to Create SQL Always On Certificate Error

Let’s install KB10216365 to fix the failed SQL Always On certificate error. You can install the out-of-band KB from the updates and services node. You must click the check for updates button to make the KB available.

NOTE! – There is no client component update with KB10216365.

Fix SCCM Failed to Create SQL Always On Certificate Error - Fig.2
Fix SCCM Failed to Create SQL Always On Certificate Error – Fig.2

Summary of the updated package installation – Install Update Package Configuration Manager 2103 Hotfix (KB10216365) Prerequisite warnings will be ignored.

  • Right-click on the hotfix and select the Install Update package to start the installation.
  • Click on NEXT to continue.
  • Install Update Package Configuration Manager 2103 Hotfix (KB10216365).
    • Select Prerequisite warnings will be ignored.
  • Click on Next, Next, and Next to finish the wizard.
Fix SCCM Failed to Create SQL Always On Certificate Error - Fig.3
Fix SCCM Failed to Create SQL Always On Certificate Error – Fig.3

Secondary Server Update

You must manually update a secondary site from the SCCM admin console by selecting Administration > Site Configuration > Sites > Recover Secondary Site.

Fix SCCM Failed to Create SQL Always On Certificate Error - Fig.4
Fix SCCM Failed to Create SQL Always On Certificate Error – Fig.4

The latest Configuration Manager 2103 (full version) is 5.00.9049.1037 (of course – after the installation KB10216365).

Resources

We are on WhatsApp. To get the latest step-by-step guides and news updates, Join our Channel. Click here –HTMD WhatsApp.

Author

Anoop C Nair has been Microsoft MVP for 10 consecutive years from 2015 onwards. He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Windows 11 KB5101650 KB5099414 July 2026 Patch and 3 Zero Day Vulnerabilities and 570 Flaws

Key Takeaways Windows 11 KB5101650 KB5099414 July 2026 Patch and 3 Zero Day Vulnerabilities and 570 Flaws! In the July 2026 Patch, Microsoft introduced new features designed to improve the overall Windows experience. The update adds enhancements to Windows Update for more flexible update management and introduces Point-in-Time Restore, providing an additional recovery option for […]

AC Anoop C Nair 9 min read
Intune

2026 June KB5094126 KB5093998 Windows 11 Patch | 3 Zero Day Vulnerabilities and 200 Flaws

Key Takeaways 2026 June KB5094126 KB5093998 Windows 11 Patch | 3 Zero Day Vulnerabilities and 200 Flaws! The June 2026 Windows 11 Patch Tuesday update brings several improvements to File Explorer. It adds support for additional archive formats, including UU, CPIO, XAR, and NuGet Packages (NUPKG). The update also preserves View and Sort preferences in […]

AC Anoop C Nair 10 min read
Intune

2026 May KB5089549 KB5087420 Windows 11 Patch | 0 Zero Day Vulnerabilities and 120 Flaws

Key Takeaways The Windows 11 May 2026 Patch KB5089549 KB5087420 Update brings important security fixes, performance improvements, and reliability enhancements across the operating system. The update introduces new features such as Xbox Mode for gaming, File Explorer improvements, enhanced input and sharing experiences, better taskbar and Windows Hello reliability, and additional enterprise management capabilities for […]

AC Anoop C Nair 8 min read
SCCM

ConfigMgr 2603 Introduces New Early Update Enrollment Process

Key Takeaways In this post we are discussing the ConfigMgr 2603 Introduces New Early Update Enrollment Process. Microsoft has officially released Configuration Manager version 2603 to the Early Update Ring, giving organizations an opportunity to test upcoming improvements before the global production rollout. The release is targeted at enterprises running ConfigMgr version 2409 or later […]

AC Anoop C Nair 3 min read