MECM - Software Update Deployments Stuck in Unknown Status

We are experiencing an issue where approximately 50% of our production devices are stuck in an Unknown Status for our monthly software update deployments.

mpcontrol.log now successfully validates health checks with an HTTP 200 OK status.

However, despite the infrastructure being healthy, the 50% of devices in the "Unknown" tab are failing to update their deployment status in the console, even after triggering a "Run Summarization".

Troubleshooting Already Completed:

1. MP Health: Confirmed mpcontrol.log is stable with HTTP 200 responses.
2. IIS Settings: Verified CCM_CLIENT and SMS_MP virtual directories are correctly configured to "Require SSL" and "Accept" client certificates.
3. Bindings: Confirmed WSUS and default web site port bindings are standard (8530/8531 and 80/443).
4. Client Logs: Prior to the fix, client-side PolicyAgent.log reported transient policy download failures with error code 0x87d00231.