When you plan to set up SCCM CMG, you don’t need to open any inbound ports to your on-premises network. Associate SCCM CMG with Boundary groups.Allow SCCM Cloud Management Gateway Traffic and cloud distribution points.Configure HTTPS certs for Management Points.Setup Client trusted root certificate to SCCM CMG.Setup SCCM CMG trusted root certificate to clients.Setup SCCM CMG Server Authentication Certificate.One CMG supports up to 16 virtual machine (VM) instances in the Azure cloud service. When you set up SCCM cloud management gateway, you select how many VM instances support the CMG. By default, the SCCM CMG uses a Standard A2 V2 VM. The CMG uses Azure Cloud Services as PaaS, this service uses virtual machines (VMs) that will involve compute costs.

If you are planning to use CMG, I would suggest you to read this article by Microsoft. The biggest advantage or benefits of SCCM cloud management gateway is you don’t need to expose your on-premises infrastructure to the internet. When you deploy the SCCM CMG as a cloud service in Microsoft Azure, you can manage internet clients without additional infrastructure. The cloud management gateway also known as SCCM CMG provides a simple way to manage Configuration Manager clients on the internet.

Can a Primary site have multiple instances of the CMG?.Can I use PowerShell command to setup CMG?.SCCM CMG (Cloud Management Gateway) FAQs.Allow access to Cloud Distribution Points.Install Cloud Management Gateway Connection Point.Setup SCCM Cloud Management Gateway (SCCM CMG).

Import Web Server CMG certificate on the Primary Site Server.Create and Issue Web Server SCCM CMG Certificate Template.Verify Configuration Manager Azure Service.Configure Azure Services for Cloud Management.Client trusted root certificate to SCCM CMG.SCCM CMG trusted root certificate to clients.SCCM CMG Server Authentication Certificate.Supported Configurations for Cloud Management Gateway.

Sccm configuration manager