SCCM MP Stop working

lalajee 1,811 Reputation points
2022-11-01T15:25:42.767+00:00

Hi,

We change HTTPS only to HTTPs or HTTP our management point stop working.

256059-image.png

We have change it back to HTTPS Only but that did not fix the issue with our MP.

I have reboot all of our site servers but still same issue
I also remove the MP role from the server and then reinstalled again but still same issue

MPSetup log show no errors for install

MPcontrol show below error
Call to httpsendrequestSync failed for port 443 with status code 500, text internal saver error

Attempting to connect to the configured SQL database.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)*** [08001][21][Microsoft][SQL Server Native Client 11.0]Encryption not supported on the client.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)*** [08001][-2146893007][Microsoft][SQL Server Native Client 11.0]SSL Provider: The client and server cannot communicate, because they do not possess a common algorithm.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)*** [08001][21][Microsoft][SQL Server Native Client 11.0]Client unable to establish connection	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)*** [08001][-2146893007][Microsoft][SQL Server Native Client 11.0]A network-related or instance-specific error has occurred while establishing a connection to SQL Server. Server is not found or not accessible. Check if instance name is correct and if SQL Server is configured to allow remote connections. For more information see SQL Server Books Online.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)*** Failed to connect to the SQL Server, connection type: MP_CONTROL_ACCESS.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Failed to get connection to the configured SQL database.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Failed to connect to the configured SQL database.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Failed to get the current CLR Enabled configuration setting for the configured SQL Server hosting the database.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)  
  
Found SSL binding 'IIS_Cert_Thumprint', 'My'	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Begin searching client certificates based on Certificate Issuers	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)No Certificate Issuers specified	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Completed searching client certificates based on Certificate Issuers	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Begin to select client certificate	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Using certificate selection criteria 'CertHashCode:IIS_Cert_Thumprint'.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Begin validation of Certificate [Thumbprint IIS_Cert_Thumprint] issued to 'DP0005.domain.co.uk'	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Completed validation of Certificate [Thumbprint IIS_Cert_Thumprint] issued to 'DP0005.domain.co.uk'	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)>>> Client selected the PKI Certificate [Thumbprint IIS_Cert_Thumprint] issued to 'DP0005.domain.co.uk'	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Begin validation of Certificate [Thumbprint IIS_Cert_Thumprint] issued to 'DP0005.domain.co.uk'	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Verification of Certificate chain returned 800B0109	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)VerifyCertificateChain( pCertContext, dwChainFlags, pszPolicyOID, dwPolicyFlags, hChainEngine, pSmsCtlContext, sRootHash ), HRESULT=800b0109 (C:\__w\1\s\src\Framework\CcmUtilLib\CcmCert.cpp,1652)	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)CcmVerifyCertificateChain( pCertContext, dwChainFlags, ((LPCSTR) 1), dwPolicyFlags, hChainEngine, pSmsCtlContext ), HRESULT=800b0109 (C:\__w\1\s\src\Framework\CcmUtilLib\CcmCert.cpp,1888)	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Completed validation of Certificate [Thumbprint IIS_Cert_Thumprint] issued to 'DP0005.domain.co.uk'	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Certificate is not issued by SCCM.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)SSL binding on port 443 isn't with CCM genreated cert.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Started User Service maintenance...	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Certificate is Exportable	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Successfully granted permission to certificate	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)User Service: retrieved certificate ba d3 dd 79 61 c4 87 5a 03 59 9e d7 a5 7f c6 6b 93 f0 92 7d	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Successfully completed User Service maintenance.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Completed periodic tasks.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Applied D:P(A;CIOI;GA;;;SY)(A;CIOI;GA;;;BA)(A;CIOI;GR;;;LS)(A;CIOI;GR;;;S-1-5-17) to folder INSTALL_LOCClient	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)SSL is enabled.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Client authentication is also enabled.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)CRL Checking is also enabled.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)  
Machine name is 'DP0005.domain.co.uk'.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Begin validation of Certificate [Thumbprint Client_Cert_Thumbprint] issued to 'DP0005.domain.co.uk'	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Certificate has "SSL Client Authentication" capability.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Completed validation of Certificate [Thumbprint Client_Cert_Thumbprint] issued to 'DP0005.domain.co.uk'	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Begin validation of Certificate [Thumbprint Client_Cert_Thumbprint2] issued to 'DP0005.domain.co.uk'	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Certificate has "SSL Client Authentication" capability.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Completed validation of Certificate [Thumbprint Client_Cert_Thumbprint2] issued to 'DP0005.domain.co.uk'	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Begin validation of Certificate [Thumbprint Client_Cert_Thumbprint4] issued to 'DP0005.domain.co.uk'	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Certificate doesn't have "SSL Client Authentication" capabilities.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Completed validation of Certificate [Thumbprint Client_Cert_Thumbprint4] issued to 'DP0005.domain.co.uk'	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Skipping this certificate which is not valid for ConfigMgr usage.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Begin validation of Certificate [Thumbprint Client_Cert_Thumbprint3] issued to 'DP0005.domain.co.uk'	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Certificate doesn't have "SSL Client Authentication" capabilities.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Completed validation of Certificate [Thumbprint Client_Cert_Thumbprint3] issued to 'DP0005.domain.co.uk'	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Skipping this certificate which is not valid for ConfigMgr usage.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Begin validation of Certificate [Thumbprint IIS_Cert_Thumprint] issued to 'DP0005.domain.co.uk'	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Certificate doesn't have "SSL Client Authentication" capabilities.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Completed validation of Certificate [Thumbprint IIS_Cert_Thumprint] issued to 'DP0005.domain.co.uk'	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Skipping this certificate which is not valid for ConfigMgr usage.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)>>> Selected Certificate [Thumbprint Client_Cert_Thumbprint2] issued to 'DP0005.domain.co.uk' for HTTPS Client Authentication	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Call to HttpSendRequestSync failed for port 443 with status code 500, text: Internal Server Error	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Sent summary record of SMS Management Point on ["Display=\\DP0005.domain.co.uk\"]MSWNET:["SMS_SITE=000"]\\DP0005.domain.co.uk\ to INSTALL_LOC\sitestat.box\sw0m411j.SUM, Availability 1, 629142524 KB total disk space , 142377880 KB free disk space, installation state 0.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)Http test request failed, status code is 500, 'Internal Server Error'.	SMS_MP_CONTROL_MANAGER	01/11/2022 15:16:55	7856 (0x1EB0)  
Microsoft Configuration Manager
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Garth 5,801 Reputation points
    2022-11-02T01:24:24.383+00:00

    The error is listed within the log. The client and server cannot communicate, because they do not possess a common algorithm.

    1 person found this answer helpful.

  2. Sherry Kissinger 5,351 Reputation points
    2022-11-02T14:27:52.18+00:00

    The logs appear to tell you exactly what is wrong. for example...

    "SSL Provider: The client and server cannot communicate, because they do not possess a common algorithm."

    "A network-related or instance-specific error has occurred while establishing a connection to SQL Server. Server is not found or not accessible."

    So start with fixing that issue. You may want to google for those phrases, and see what can be done, we don't know your infrastructure, so being able to tell you exactly specifically what to do is difficult. We don't know what, if anything, changed on your SQL Server, vs. any changes on your MP server, vs. any changes to your routers, or other network configurations.

    1 person found this answer helpful.
    0 comments No comments

  3. Rahul Jindal [MVP] 10,361 Reputation points MVP
    2022-11-01T22:53:30.59+00:00

    Did you verify for the web server cert in IIS after you made the changes?


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.