This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 4%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EL%3C/text%3E%3C/svg%3E)
I have installed sccm client onto workgroup computer using pki, sccm client is report back to sccm and i do see it as active and approved in sccm console
its try to install an software and it stuck on 0% for last 24 hours, machine on domain in same subnet are working fine its just the workgroup machine are not downloading anything.
datatransferservicer.log showing these errors
DTSJob({16A46C2E-05BB-4828-8443-6134EC874C24}):CDTSJob::HandleDownloadError - BITS job {CF6AC26A-A29C-44CE-A021-CFE2B8AE76B8} failed to download source file https://DP01.domain.uk:443/SMS_DP_SMSPKG$/xxx00003/ccmsetup.exe to destination C:\Windows\ccmsetup\autoupgrade\ccmsetup.xxx00003.27.exe with error 0x80072F06 DataTransferService 09/11/2022 14:30:20 8372 (0x20B4)
CCMHTTP] AsyncCallback(): ----------------------------------------------------------------- DataTransferService 09/11/2022 14:30:21 8720 (0x2210)
[CCMHTTP] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered DataTransferService 09/11/2022 14:30:21 8720 (0x2210)
[CCMHTTP] : dwStatusInformationLength is 4
DataTransferService 09/11/2022 14:30:21 8720 (0x2210)
[CCMHTTP] : *lpvStatusInformation is 0x10
DataTransferService 09/11/2022 14:30:21 8720 (0x2210)
[CCMHTTP] : WINHTTP_CALLBACK_STATUS_FLAG_CERT_CN_INVALID is set
DataTransferService 09/11/2022 14:30:21 8720 (0x2210)
[CCMHTTP] AsyncCallback(): ----------------------------------------------------------------- DataTransferService 09/11/2022 14:30:21 8720 (0x2210)
Raising event:
instance of CCM_CcmHttp_Status
{
ClientID = "GUID:16FC6E72-183C-xxxxx-B2C3C";
DateTime = "20221109143021.231000+000";
HostName = "DP01.domain.uk";
HRESULT = "0x80072f8f";
ProcessID = 4220;
StatusCode = 16;
ThreadID = 8720;
};
DataTransferService 09/11/2022 14:30:21 8720 (0x2210)
Failed to send empty winhttp request. Error 0x80072f8f DataTransferService 09/11/2022 14:30:21 8720 (0x2210)
Failed to get server SSL certificate context. Error 0x80072f8f DataTransferService 09/11/2022 14:30:21 8720 (0x2210)
[CCMHTTP] ERROR: URL=https://DP01.domain.uk:443/CCMTOKENAUTH_SMS_DP_SMSPKG$/xxx00003, Port=443, Options=1087, Code=12175, Text=ERROR_WINHTTP_SECURE_FAILURE DataTransferService 09/11/2022 14:30:21 8720 (0x2210)
[CCMHTTP] ERROR INFO: StatusCode=<unknown> StatusText= DataTransferService 09/11/2022 14:30:21 8720 (0x2210)
Successfully queued event on HTTP/HTTPS failure for server 'DP01.domain.uk'. DataTransferService 09/11/2022 14:30:21 8720 (0x2210)
DTSFlag is 0x00400506 DataTransferService 09/11/2022 14:45:10 8888 (0x22B8)
ContentTransferManager log
CTM encountered error processing reply from DTS. Code 0x8007010b ContentTransferManager 09/11/2022 14:58:22 7972 (0x1F24)
CTMJob({D079184C-C3C4-4DD7-82CC-F7B77BEBAEB5}): CCTMJob::_PersistLocations - Persisted locations
(BOUNDARYGROUP) http://DP01.domain.uk/SMS_DP_SMSPKG$/Content_0b260969-4cb2-488b-a6fe-e40da8ed1090.1
(BOUNDARYGROUP) http://DP01.domain.uk/NOCERT_SMS_DP_SMSPKG$/Content_0b260969-4cb2-488b-a6fe-e40da8ed1090.1
(BOUNDARYGROUP) https://DP01.domain.uk/CCMTOKENAUTH_SMS_DP_SMSPKG$/Content_0b260969-4cb2-488b-a6fe-e40da8ed1090.1 ContentTransferManager 09/11/2022 14:59:16 7972 (0x1F24)
CTMJob({D079184C-C3C4-4DD7-82CC-F7B77BEBAEB5}): CCTMJob::UpdateLocations - Failed find or get the reg value for Content_abb02aa8-f2ea-45dd-8cb7-731d29ab7b05.1 ContentTransferManager 09/11/2022 14:59:16 7972 (0x1F24)
CTMJob({CAEB1135-B235-4ED1-9FE4-9476E8BFB91A}): CCTMJob::_PersistLocations - Persisted locations
(BOUNDARYGROUP) http://DP01.domain.uk/NOCERT_SMS_DP_SMSPKG$/xxx00003
(BOUNDARYGROUP) http://DP01.domain.uk/SMS_DP_SMSPKG$/xxx00003
(BOUNDARYGROUP) https://DP01.domain.uk/CCMTOKENAUTH_SMS_DP_SMSPKG$/xxx00003 ContentTransferManager 09/11/2022 14:59:16 7480 (0x1D38)
CTM_StartJob - Starting CTM job {CAEB1135-B235-4ED1-9FE4-9476E8BFB91A} ContentTransferManager 09/11/2022 15:01:27 7496 (0x1D48)
CTM_StartJob - Starting CTM job {D079184C-C3C4-4DD7-82CC-F7B77BEBAEB5} ContentTransferManager 09/11/2022 15:01:27 7496 (0x1D48)
This client will report download history every 1440 min. ContentTransferManager 09/11/2022 15:01:27 7496 (0x1D48)
CTM encountered error processing reply from DTS. Code 0x8007010b ContentTransferManager 09/11/2022 15:01:30 7496 (0x1D48)
CTMJob({D079184C-C3C4-4DD7-82CC-F7B77BEBAEB5}): CCTMJob::_PersistLocations - Persisted locations
(BOUNDARYGROUP) http://DP01.domain.uk/NOCERT_SMS_DP_SMSPKG$/Content_0b260969-4cb2-488b-a6fe-e40da8ed1090.1
(BOUNDARYGROUP) http://DP01.domain.uk/SMS_DP_SMSPKG$/Content_0b260969-4cb2-488b-a6fe-e40da8ed1090.1
(BOUNDARYGROUP) https://DP01.domain.uk/CCMTOKENAUTH_SMS_DP_SMSPKG$/Content_0b260969-4cb2-488b-a6fe-e40da8ed1090.1 ContentTransferManager 09/11/2022 15:02:24 3032 (0x0BD8)
CTMJob({D079184C-C3C4-4DD7-82CC-F7B77BEBAEB5}): CCTMJob::UpdateLocations - Failed find or get the reg value for Content_abb02aa8-f2ea-45dd-8cb7-731d29ab7b05.1 ContentTransferManager 09/11/2022 15:02:24 3032 (0x0BD8)
CTMJob({CAEB1135-B235-4ED1-9FE4-9476E8BFB91A}): CCTMJob::_PersistLocations - Persisted locations
(BOUNDARYGROUP) http://DP01.domain.uk/NOCERT_SMS_DP_SMSPKG$/xxx00003
(BOUNDARYGROUP) http://DP01.domain.uk/SMS_DP_SMSPKG$/xxx00003
(BOUNDARYGROUP) https://DP01.domain.uk/CCMTOKENAUTH_SMS_DP_SMSPKG$/xxx00003 ContentTransferManager 09/11/2022 15:02:24 8936 (0x22E8)
Note that this will be my only post in this thread.
Your issue is related to your certificates: WINHTTP_CALLBACK_STATUS_SECURE_FAILURE. This could be one of a number of different things including not trusting the PKI, certs being expired, CRL not being accessible etc. Generally, the best way to narrow this down is to review the IIS log on the MP to find corresponding log entries and this will contain a more detailed 403 error code.
The main comment I came here to make is that Windows 7 is completely unsupported. There is no such thing as "extended support"; ESU is extended "security" updates and is not any form of support whatsoever.