How to fix Intune SSL/TLS communication issue

Question

Hello,

I have been having an issue since August 22 that impacts our organization deploying new laptops through Intune (Autopilot, ESP).

I have opened a case with Microsoft, no luck on that end yet.

The issue: When enrolling a device through Autopilot, in ESP hangs on Apps(Identifying). Based on the logs, it seems like a network related issue, but I have tried on many networks including personal home internet, work corporate internet, Starbucks, hotspot, etc same outcome. Logs pasted below.

When I perform the same enrollment through a Windows 365 virtual computer, everything goes through just fine.

Any ideas would be great - this is the strangest issue and I cannot figure out why it is not going through.

[SendWebRequestInternal] Web Exception occurs when sending network request, non-retryable, the exception is System.Net.WebException: The request was aborted: Could not create SSL/TLS secure channel.

at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)

at System.Threading.Tasks.TaskFactory1.FromAsyncCoreLogic(IAsyncResult iar, Func2 endFunction, Action1 endAction, Task1 promise, Boolean requiresSynchronization)

--- End of stack trace from previous location where exception was thrown ---

at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)

at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)

at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd(Task task)

at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.EmsServiceBase.

Answer 1

Hi Josh Kennedy,
Intune is currently not supported in the Q&A forums, the supported products are listed over here https://learn.microsoft.com/en-us/answers/products (more to be added later on).

You can ask the experts in the dedicated Intune forum over here: https://techcommunity.microsoft.com/t5/microsoft-intune/bd-p/Microsoft-Intune

Please don't forget to Accept answer and close this thread.
Thank you.

Answer 2

@Josh Kennedy, Thanks for posting in Q&A.

From your description, I know you have trouble in Intune Autopilot Deployment.

To clarify this issue, please check the following.

1.What kind of app were you deployed via Intune? Win32 or LOB or mixed of them? Please Make sure we don't mix LOB and Win32 apps in any type of Autopilot enrollment, and it is recommended that using win32 app as deployment.

2.Could you please share with us the screenshot of ESP stage that app failed to install and the screenshot of app status in Intune portal?

3.You can try to unassign apps in Intune, and after Autopilot done and re-upload it again, then deploy them again.

Here are some related articles that maybe helpful.

https://www.reddit.com/r/Intune/comments/1f9ch79/stuck_on_appsidentifying_ssltls_issue_esp/

https://intunestuff.com/2024/09/04/identify-failed-apps-during-an-autopilot-installation/

Non-official, just for reference.

https://techcommunity.microsoft.com/t5/microsoft-intune/intune-management-extension-securechannelfailure-could-not/m-p/3288172

If there is any update, feel free to let me know.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.