Workgroup computer not download any packages - Win 7 with Extended Support

lalajee 1,811 Reputation points
2022-11-10T09:37:23.803+00:00

I have installed sccm client onto workgroup computer using pki, sccm client is report back to sccm and i do see it as active and approved in sccm console

its try to install an software and it stuck on 0% for last 24 hours, machine on domain in same subnet are working fine its just the workgroup machine are not downloading anything.

datatransferservicer.log showing these errors

DTSJob({16A46C2E-05BB-4828-8443-6134EC874C24}):CDTSJob::HandleDownloadError - BITS job {CF6AC26A-A29C-44CE-A021-CFE2B8AE76B8} failed to download source file https://DP01.domain.uk:443/SMS_DP_SMSPKG$/xxx00003/ccmsetup.exe to destination C:\Windows\ccmsetup\autoupgrade\ccmsetup.xxx00003.27.exe with error 0x80072F06	DataTransferService	09/11/2022 14:30:20	8372 (0x20B4)  
  
  
CCMHTTP] AsyncCallback(): -----------------------------------------------------------------	DataTransferService	09/11/2022 14:30:21	8720 (0x2210)  
[CCMHTTP] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered	DataTransferService	09/11/2022 14:30:21	8720 (0x2210)  
[CCMHTTP]                : dwStatusInformationLength is 4  
	DataTransferService	09/11/2022 14:30:21	8720 (0x2210)  
[CCMHTTP]                : *lpvStatusInformation is 0x10  
	DataTransferService	09/11/2022 14:30:21	8720 (0x2210)  
[CCMHTTP]            : WINHTTP_CALLBACK_STATUS_FLAG_CERT_CN_INVALID is set  
	DataTransferService	09/11/2022 14:30:21	8720 (0x2210)  
[CCMHTTP] AsyncCallback(): -----------------------------------------------------------------	DataTransferService	09/11/2022 14:30:21	8720 (0x2210)  
Raising event:  
instance of CCM_CcmHttp_Status  
{  
	ClientID = "GUID:16FC6E72-183C-xxxxx-B2C3C";  
	DateTime = "20221109143021.231000+000";  
	HostName = "DP01.domain.uk";  
	HRESULT = "0x80072f8f";  
	ProcessID = 4220;  
	StatusCode = 16;  
	ThreadID = 8720;  
};  
	DataTransferService	09/11/2022 14:30:21	8720 (0x2210)  
Failed to send empty winhttp request. Error 0x80072f8f	DataTransferService	09/11/2022 14:30:21	8720 (0x2210)  
Failed to get server SSL certificate context. Error 0x80072f8f	DataTransferService	09/11/2022 14:30:21	8720 (0x2210)  
[CCMHTTP] ERROR: URL=https://DP01.domain.uk:443/CCMTOKENAUTH_SMS_DP_SMSPKG$/xxx00003, Port=443, Options=1087, Code=12175, Text=ERROR_WINHTTP_SECURE_FAILURE	DataTransferService	09/11/2022 14:30:21	8720 (0x2210)  
[CCMHTTP] ERROR INFO: StatusCode=<unknown> StatusText=	DataTransferService	09/11/2022 14:30:21	8720 (0x2210)  
Successfully queued event on HTTP/HTTPS failure for server 'DP01.domain.uk'.	DataTransferService	09/11/2022 14:30:21	8720 (0x2210)  
DTSFlag is 0x00400506	DataTransferService	09/11/2022 14:45:10	8888 (0x22B8)  

ContentTransferManager log

CTM encountered error processing reply from DTS. Code 0x8007010b	ContentTransferManager	09/11/2022 14:58:22	7972 (0x1F24)  
CTMJob({D079184C-C3C4-4DD7-82CC-F7B77BEBAEB5}): CCTMJob::_PersistLocations - Persisted locations   
	(BOUNDARYGROUP) http://DP01.domain.uk/SMS_DP_SMSPKG$/Content_0b260969-4cb2-488b-a6fe-e40da8ed1090.1  
	(BOUNDARYGROUP) http://DP01.domain.uk/NOCERT_SMS_DP_SMSPKG$/Content_0b260969-4cb2-488b-a6fe-e40da8ed1090.1  
	(BOUNDARYGROUP) https://DP01.domain.uk/CCMTOKENAUTH_SMS_DP_SMSPKG$/Content_0b260969-4cb2-488b-a6fe-e40da8ed1090.1	ContentTransferManager	09/11/2022 14:59:16	7972 (0x1F24)  
CTMJob({D079184C-C3C4-4DD7-82CC-F7B77BEBAEB5}): CCTMJob::UpdateLocations - Failed find or get the reg value for Content_abb02aa8-f2ea-45dd-8cb7-731d29ab7b05.1	ContentTransferManager	09/11/2022 14:59:16	7972 (0x1F24)  
CTMJob({CAEB1135-B235-4ED1-9FE4-9476E8BFB91A}): CCTMJob::_PersistLocations - Persisted locations   
	(BOUNDARYGROUP) http://DP01.domain.uk/NOCERT_SMS_DP_SMSPKG$/xxx00003  
	(BOUNDARYGROUP) http://DP01.domain.uk/SMS_DP_SMSPKG$/xxx00003  
	(BOUNDARYGROUP) https://DP01.domain.uk/CCMTOKENAUTH_SMS_DP_SMSPKG$/xxx00003	ContentTransferManager	09/11/2022 14:59:16	7480 (0x1D38)  
CTM_StartJob - Starting CTM job {CAEB1135-B235-4ED1-9FE4-9476E8BFB91A}	ContentTransferManager	09/11/2022 15:01:27	7496 (0x1D48)  
CTM_StartJob - Starting CTM job {D079184C-C3C4-4DD7-82CC-F7B77BEBAEB5}	ContentTransferManager	09/11/2022 15:01:27	7496 (0x1D48)  
This client will report download history every 1440 min.	ContentTransferManager	09/11/2022 15:01:27	7496 (0x1D48)  
CTM encountered error processing reply from DTS. Code 0x8007010b	ContentTransferManager	09/11/2022 15:01:30	7496 (0x1D48)  
CTMJob({D079184C-C3C4-4DD7-82CC-F7B77BEBAEB5}): CCTMJob::_PersistLocations - Persisted locations   
	(BOUNDARYGROUP) http://DP01.domain.uk/NOCERT_SMS_DP_SMSPKG$/Content_0b260969-4cb2-488b-a6fe-e40da8ed1090.1  
	(BOUNDARYGROUP) http://DP01.domain.uk/SMS_DP_SMSPKG$/Content_0b260969-4cb2-488b-a6fe-e40da8ed1090.1  
	(BOUNDARYGROUP) https://DP01.domain.uk/CCMTOKENAUTH_SMS_DP_SMSPKG$/Content_0b260969-4cb2-488b-a6fe-e40da8ed1090.1	ContentTransferManager	09/11/2022 15:02:24	3032 (0x0BD8)  
CTMJob({D079184C-C3C4-4DD7-82CC-F7B77BEBAEB5}): CCTMJob::UpdateLocations - Failed find or get the reg value for Content_abb02aa8-f2ea-45dd-8cb7-731d29ab7b05.1	ContentTransferManager	09/11/2022 15:02:24	3032 (0x0BD8)  
CTMJob({CAEB1135-B235-4ED1-9FE4-9476E8BFB91A}): CCTMJob::_PersistLocations - Persisted locations   
	(BOUNDARYGROUP) http://DP01.domain.uk/NOCERT_SMS_DP_SMSPKG$/xxx00003  
	(BOUNDARYGROUP) http://DP01.domain.uk/SMS_DP_SMSPKG$/xxx00003  
	(BOUNDARYGROUP) https://DP01.domain.uk/CCMTOKENAUTH_SMS_DP_SMSPKG$/xxx00003	ContentTransferManager	09/11/2022 15:02:24	8936 (0x22E8)  
  
Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,965 questions
Microsoft Configuration Manager
0 comments No comments
{count} votes

Accepted answer
  1. Jason Sandys 31,186 Reputation points Microsoft Employee
    2022-11-10T16:17:15.063+00:00

    Note that this will be my only post in this thread.

    Your issue is related to your certificates: WINHTTP_CALLBACK_STATUS_SECURE_FAILURE. This could be one of a number of different things including not trusting the PKI, certs being expired, CRL not being accessible etc. Generally, the best way to narrow this down is to review the IIS log on the MP to find corresponding log entries and this will contain a more detailed 403 error code.

    The main comment I came here to make is that Windows 7 is completely unsupported. There is no such thing as "extended support"; ESU is extended "security" updates and is not any form of support whatsoever.

    1 person found this answer helpful.
    0 comments No comments

0 additional answers

Sort by: Most helpful