Installing the ConfigMgr client with only HTTPS
You need to change a few parameters when you install the ConfigMgr client to a site (or area of your network) that only has a HTTPS management point. If you don’t include all of the parameters, you will probably get errors in the ccmsetup log about not being able to find a valid distribution point, similar to this:
Here’s the command that I use:
ccmsetup.exe /mp:https://<FQDN of your MP> /UsePKICert SMSMP=https://<FDQN of your MP> SMSSITECODE=<site code>
The important parts of this command are that specifically state to connect over HTTPS in the /mp and SMSMP parameters. Also, the UsePKICert is important.