This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 4%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EL%3C/text%3E%3C/svg%3E)
Hi,
We change HTTPS only to HTTPs or HTTP our management point stop working.
We have change it back to HTTPS Only but that did not fix the issue with our MP.
I have reboot all of our site servers but still same issue
I also remove the MP role from the server and then reinstalled again but still same issue
MPSetup log show no errors for install
MPcontrol show below error
Call to httpsendrequestSync failed for port 443 with status code 500, text internal saver error
Attempting to connect to the configured SQL database. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)*** [08001][21][Microsoft][SQL Server Native Client 11.0]Encryption not supported on the client. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)*** [08001][-2146893007][Microsoft][SQL Server Native Client 11.0]SSL Provider: The client and server cannot communicate, because they do not possess a common algorithm. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)*** [08001][21][Microsoft][SQL Server Native Client 11.0]Client unable to establish connection SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)*** [08001][-2146893007][Microsoft][SQL Server Native Client 11.0]A network-related or instance-specific error has occurred while establishing a connection to SQL Server. Server is not found or not accessible. Check if instance name is correct and if SQL Server is configured to allow remote connections. For more information see SQL Server Books Online. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)*** Failed to connect to the SQL Server, connection type: MP_CONTROL_ACCESS. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Failed to get connection to the configured SQL database. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Failed to connect to the configured SQL database. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Failed to get the current CLR Enabled configuration setting for the configured SQL Server hosting the database. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)
Found SSL binding 'IIS_Cert_Thumprint', 'My' SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Begin searching client certificates based on Certificate Issuers SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)No Certificate Issuers specified SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Completed searching client certificates based on Certificate Issuers SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Begin to select client certificate SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Using certificate selection criteria 'CertHashCode:IIS_Cert_Thumprint'. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Begin validation of Certificate [Thumbprint IIS_Cert_Thumprint] issued to 'DP0005.domain.co.uk' SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Completed validation of Certificate [Thumbprint IIS_Cert_Thumprint] issued to 'DP0005.domain.co.uk' SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)>>> Client selected the PKI Certificate [Thumbprint IIS_Cert_Thumprint] issued to 'DP0005.domain.co.uk' SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Begin validation of Certificate [Thumbprint IIS_Cert_Thumprint] issued to 'DP0005.domain.co.uk' SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Verification of Certificate chain returned 800B0109 SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)VerifyCertificateChain( pCertContext, dwChainFlags, pszPolicyOID, dwPolicyFlags, hChainEngine, pSmsCtlContext, sRootHash ), HRESULT=800b0109 (C:\__w\1\s\src\Framework\CcmUtilLib\CcmCert.cpp,1652) SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)CcmVerifyCertificateChain( pCertContext, dwChainFlags, ((LPCSTR) 1), dwPolicyFlags, hChainEngine, pSmsCtlContext ), HRESULT=800b0109 (C:\__w\1\s\src\Framework\CcmUtilLib\CcmCert.cpp,1888) SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Completed validation of Certificate [Thumbprint IIS_Cert_Thumprint] issued to 'DP0005.domain.co.uk' SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Certificate is not issued by SCCM. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)SSL binding on port 443 isn't with CCM genreated cert. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Started User Service maintenance... SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Certificate is Exportable SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Successfully granted permission to certificate SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)User Service: retrieved certificate ba d3 dd 79 61 c4 87 5a 03 59 9e d7 a5 7f c6 6b 93 f0 92 7d SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Successfully completed User Service maintenance. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Completed periodic tasks. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Applied D:P(A;CIOI;GA;;;SY)(A;CIOI;GA;;;BA)(A;CIOI;GR;;;LS)(A;CIOI;GR;;;S-1-5-17) to folder INSTALL_LOCClient SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)SSL is enabled. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Client authentication is also enabled. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)CRL Checking is also enabled. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)
Machine name is 'DP0005.domain.co.uk'. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Begin validation of Certificate [Thumbprint Client_Cert_Thumbprint] issued to 'DP0005.domain.co.uk' SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Certificate has "SSL Client Authentication" capability. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Completed validation of Certificate [Thumbprint Client_Cert_Thumbprint] issued to 'DP0005.domain.co.uk' SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Begin validation of Certificate [Thumbprint Client_Cert_Thumbprint2] issued to 'DP0005.domain.co.uk' SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Certificate has "SSL Client Authentication" capability. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Completed validation of Certificate [Thumbprint Client_Cert_Thumbprint2] issued to 'DP0005.domain.co.uk' SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Begin validation of Certificate [Thumbprint Client_Cert_Thumbprint4] issued to 'DP0005.domain.co.uk' SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Certificate doesn't have "SSL Client Authentication" capabilities. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Completed validation of Certificate [Thumbprint Client_Cert_Thumbprint4] issued to 'DP0005.domain.co.uk' SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Skipping this certificate which is not valid for ConfigMgr usage. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Begin validation of Certificate [Thumbprint Client_Cert_Thumbprint3] issued to 'DP0005.domain.co.uk' SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Certificate doesn't have "SSL Client Authentication" capabilities. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Completed validation of Certificate [Thumbprint Client_Cert_Thumbprint3] issued to 'DP0005.domain.co.uk' SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Skipping this certificate which is not valid for ConfigMgr usage. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Begin validation of Certificate [Thumbprint IIS_Cert_Thumprint] issued to 'DP0005.domain.co.uk' SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Certificate doesn't have "SSL Client Authentication" capabilities. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Completed validation of Certificate [Thumbprint IIS_Cert_Thumprint] issued to 'DP0005.domain.co.uk' SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Skipping this certificate which is not valid for ConfigMgr usage. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)>>> Selected Certificate [Thumbprint Client_Cert_Thumbprint2] issued to 'DP0005.domain.co.uk' for HTTPS Client Authentication SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Call to HttpSendRequestSync failed for port 443 with status code 500, text: Internal Server Error SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Sent summary record of SMS Management Point on ["Display=\\DP0005.domain.co.uk\"]MSWNET:["SMS_SITE=000"]\\DP0005.domain.co.uk\ to INSTALL_LOC\sitestat.box\sw0m411j.SUM, Availability 1, 629142524 KB total disk space , 142377880 KB free disk space, installation state 0. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)Http test request failed, status code is 500, 'Internal Server Error'. SMS_MP_CONTROL_MANAGER 01/11/2022 15:16:55 7856 (0x1EB0)
The error is listed within the log. The client and server cannot communicate, because they do not possess a common algorithm.
What does it mean
because they do not possess a common algorithm.
The logs appear to tell you exactly what is wrong. for example...
"SSL Provider: The client and server cannot communicate, because they do not possess a common algorithm."
"A network-related or instance-specific error has occurred while establishing a connection to SQL Server. Server is not found or not accessible."
So start with fixing that issue. You may want to google for those phrases, and see what can be done, we don't know your infrastructure, so being able to tell you exactly specifically what to do is difficult. We don't know what, if anything, changed on your SQL Server, vs. any changes on your MP server, vs. any changes to your routers, or other network configurations.
Did you verify for the web server cert in IIS after you made the changes?
When I access below url I get following erro
sms_mp/.sms_aut?mplist
sms_mp/.sms_aut?mpcert
sms_mp/.sms_aut?MPKEYINFORMATION
403 forbidden access is denied
From the MP i get following error
HTTP Error 403.7 Client Certificate required
Client and Web cert is assign to MP and IIS
Yeah but are they correct certs? Why did you switch to ehttp? I am asking because if that was the intention then you can just go back to using ehttp. However, ehttp in no way a replacement for full https.