SMSPXE Error - NO SSL & Other RED ERROR

Question

Hi all,
I am trying to configure our sccm for PXE boot and our farm is configured with PKI for HTTPS commmunication.
I have added a cert for my DP and configured PXE.
but when i check the SMSPXE log. i am getting the screenshot below.
Hopefuly someone can walk me through on what is wrong.

Answer 1

Hi,

Thank you for coming Microsoft MECM Q&A forum.

The error code 0x80070490 means "Element not found" and the error code 0x80004005 is a generic error that means something is wrong with SCCM.

When we have an environment with HTTPS only, based on my experience, every DP should have two certificate: one for the DP itself and one for the client. The client must have a valid Boot images for deploying operating systems certificate for the client to communicate with the site and for the PXE OSD deployment to continue. And the PXE-enabled DP also need a certificate for Site systems that have a distribution point installed to communicate with HTTPS-enabled management point. Please help check if the certificates are ok. For more information, please refer to:
PKI certificates for clients
Deploy PKI Certificates For SCCM 2012 R2 Step By Step Guide

Hope my answer could help you. Thanks for your time.

Best regards,
Simon

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi, i did remove and requested a new cert for the DP and exported it on the DP https settings. the cert is applied and put it the password.
i also checked if there are any certificates being blocked by SCCM but there is none.

i saw some article and follow the sequence.
turn off PXE.
apply cert , close the window
turn on pxe again.

and tried PXE booting but im still get NO SSL on SMSPXE, are there any other logs i can check to further diagnose the issue

Answer 3

i wonder if anyone can help out.

Answer 4

Hi,

Thanks for your reply.

1.==>There are NO task sequence deployments for this client machine. Aborting the request.
It seems that the client doesn't receive a available advertisement for it. Please help make sure you have deploy the task sequence to the collection that the client belongs to or All unknown collection.

2.Please try to follow this article to import the Client Certificate for Distribution Points:
Deploying The Client Certificate For Distribution Points

Thanks for your time.

Best regards,
Simon

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 5

HI, The task sequence is deployed to all Unknown computers.

and i did saw that guide , but really dont work.

is there any known issues for HTTPS and OSD PXE?

Thanks