SCCM – WQL – Return PKI-Client Certificate Type
To return the Client Certificate type (PKI or Self-Signed), use this code in the CM Console: Go to CM Console > Monitoring > Overview > Queries > Create Query Code SELECT DISTINCT SMS_R_System.Name, SMS_CombinedDeviceResources.UserName, SMS_CombinedDeviceResources.Domain, SMS_G_System_OPERATING_SYSTEM.BuildNumber, SMS_CombinedDeviceResources.ClientCertType FROM SMS_CombinedDeviceResources INNER JOIN SMS_R_System ON SMS_R_System.ResourceID = SMS_CombinedDeviceResources.ResourceID INNER JOIN SMS_G_System_OPERATING_SYSTEM ON SMS_G_System_OPERATING_SYSTEM.ResourceID = SMS_CombinedDeviceResources.ResourceID Screenshot