Share via

Failed to get client certificate for transportation. Error 0x87d00215

Hamid Azeez 5 Reputation points
2023-05-12T15:07:21.01+00:00

Hello support, i am hoping i can get your guidance to help resolve my issue with sccm client install.

i am seeing the following in my log file:

Failed to get client certificate for transportation. Error 0x87d00215

i am not sure where to start to trouble shoot this issue. can you please provide some guidance?

thanks in advance.

Microsoft Configuration Manager
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. CherryZhang-MSFT 6,481 Reputation points
    2023-05-15T05:21:56.7+00:00

    Hi @Hamid Azeez, 

    1, It's hard to find the cause of the error with the only log entry, please check the ccmsetup.log to see if there is any more useful information.

    2, Are you using https for client connections? If so, please run MMC and navigate to Certificates (Local Computer)> Personal >Certificates to see if your device already has a client certificate?

    Besides, about client installation error 0x8004100e in HTTPS environment this similar article for your reference:

    ConfigMgr Client installation issues in HTTPS environment – Endpoint Focus

    Note: Microsoft provides third-party contact information to help you understand the problem. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

    3, Please help check if the following logs have been created? If so, please help check if there are any error for our reference.

    • ClientIDManagerStartup.log
    • CcmMessaging.log
    • LocationServices.log

    4, Whether all devices cannot be installed the client?

    Looking forward to your reply.

    Best regards,
    Cherry

  2. Andrejs Sobolevs 86 Reputation points
    2024-05-13T13:50:35.18+00:00

    Hi,

    Today we had same issue. Root cause was - it was not possible to request for new computer certificate from local certification authority.

    mmc.exe -> certificates snap-in > computer account -> under Personal\Certificates - was no certificate. When I tried to request it manually, got error, that Request was denied by certification authority.

    Root cause was - on a certification authority server (CA) there was recently installed McAfee antivirus and after CA server restart - certification service did not came up. After correction made in McAfee side - problem was over.

    So - be careful with antivirus installations on CA servers - it will impact SCCM OSD. :)

    0 comments