We have almost 2000 agents deployed that can't contact Patch Manager console since we have been forced to recreate PAS server certificat after a failed upgrade. Is there a simple way to reprovision agent certificat and make them contact the console with the new certificat? I tried "installerhelper.exe /provision target=HOST_FQDN" from a client in PM agent install directory but I got the error 0x800300fd.
Have you tried going to the All Computers target group, highlighting the top one and then shift selecting the last one to get all selected, then on the right panel go to client certificates management and distributing it that way? Im not 100% sure if you can do them all at once that way but you can also deploy it through GPO which is how I, and I would assume most people, do it.