SCCM install is failing "ERROR: Failed to create SQL Server certificate on server"

Question

I am attempting to install SCCM 2203 on a Server 2022 VM while using a separate SQL 2019 server for the SQL Database. The account I am installing SCCM as is a domain admin with full sysadmin/local admin rights on the SQL server. I have also added the SCCM01 computer account to the local administrators group on the SQL server. I've made several attempts but the install seems to hang when attempting to create a certificate on the SQL server. An entry is created in the registry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\CertBootStrap\ which I delete in between attempts. Outside of that I do not know what/where to check. I'm hoping someone can point me in the right direction. Here is the install log:

~~===================== << Starting Configuration Manager Setup >> ===================== $$<Configuration Manager Setup><04-03-2023 13:46:14.418+240><thread=2500 (0x9C4)> INFO: ConfigMgr Setup was started by domain\domain-admin. $$<Configuration Manager Setup><04-03-2023 13:46:14.450+240><thread=2500 (0x9C4)> INFO: Command line specified was: "D:\SMSSETUP\BIN\X64\SetupWpf.exe" $$<Configuration Manager Setup><04-03-2023 13:46:14.450+240><thread=2500 (0x9C4)> ~FQDN for server SCCM01 is SCCM01.domain.local $$<Configuration Manager Setup><04-03-2023 13:46:14.465+240><thread=2500 (0x9C4)> INFO: Target computer is a 64 bit operating system. $$<Configuration Manager Setup><04-03-2023 13:46:14.590+240><thread=2500 (0x9C4)> INFO: Checking for existing setup information. $$<Configuration Manager Setup><04-03-2023 13:46:14.590+240><thread=2500 (0x9C4)> INFO: Checking for existing SQL information. $$<Configuration Manager Setup><04-03-2023 13:46:14.606+240><thread=2500 (0x9C4)> INFO: Verifying the registry entry for Asset Intelligence installation $$<Configuration Manager Setup><04-03-2023 13:46:14.622+240><thread=2500 (0x9C4)> INFO: Setting the default CSV folder path $$<Configuration Manager Setup><04-03-2023 13:46:14.622+240><thread=2500 (0x9C4)> INFO: No language packs detected. $$<Configuration Manager Setup><04-03-2023 13:46:14.637+240><thread=2500 (0x9C4)> INFO: Configuration Manager Build Number = 9078 $$<Configuration Manager Setup><04-03-2023 13:46:14.872+240><thread=2500 (0x9C4)> INFO: Configuration Manager Version = 5.0 $$<Configuration Manager Setup><04-03-2023 13:46:14.872+240><thread=2500 (0x9C4)> INFO: Configuration Manager Minimum Build Number = 800 $$<Configuration Manager Setup><04-03-2023 13:46:14.887+240><thread=2500 (0x9C4)> INFO: Verifying Configuration Manager Active Directory Schema Extensions. $$<Configuration Manager Setup><04-03-2023 13:46:14.887+240><thread=2500 (0x9C4)> INFO: Found DS Root:CN=Schema,CN=Configuration,DC=domain,DC=gov~ $$<Configuration Manager Setup><04-03-2023 13:46:14.903+240><thread=2500 (0x9C4)> INFO: Verifying Configuration Manager Active Directory Schema Extensions. $$<Configuration Manager Setup><04-03-2023 13:46:14.918+240><thread=2500 (0x9C4)> INFO: Found DS Root:CN=Schema,CN=Configuration,DC=domain,DC=gov~ $$<Configuration Manager Setup><04-03-2023 13:46:14.934+240><thread=2500 (0x9C4)> Setup Command Line is "D:\SMSSETUP\BIN\X64\SETUPWPF.EXE" $$<Configuration Manager Setup><04-03-2023 13:46:14.950+240><thread=2500 (0x9C4)> Setup Type is 0 $$<Configuration Manager Setup><04-03-2023 13:46:14.950+240><thread=2500 (0x9C4)> INFO: Checking SQLNCli version on ServerName SCCM01 $$<Configuration Manager Setup><04-03-2023 13:46:14.965+240><thread=2500 (0x9C4)> INFO: SQLNCli version is 11.4.7001.0 $$<Configuration Manager Setup><04-03-2023 13:46:14.981+240><thread=2500 (0x9C4)> Enforce using SQL native client for SQL connection. $$<Configuration Manager Setup><04-03-2023 13:46:14.981+240><thread=2500 (0x9C4)> INFO: SysCenterId [9V3aY/GTviC3bsqnzpqqlT8QG/6+M78U06zLrKITGIs=] $$<Configuration Manager Setup><04-03-2023 13:46:14.997+240><thread=2500 (0x9C4)> INFO: 'SCCM01.domain.local' is a valid FQDN. $$<Configuration Manager Setup><04-03-2023 13:46:15.012+240><thread=2500 (0x9C4)> INFO: ProductId: BXH69-M62YX-QQD6R-3GPWX-8WMFY $$<Configuration Manager Setup><04-03-2023 13:46:15.012+240><thread=2500 (0x9C4)> INFO: Software Assurance Flag = 2 $$<Configuration Manager Setup><04-03-2023 13:46:15.028+240><thread=2500 (0x9C4)> INFO: Sofware Assurance|Branch Flag = 3 $$<Configuration Manager Setup><04-03-2023 13:46:15.044+240><thread=2500 (0x9C4)> INFO: ACTIVE SA and branch pSetupInf->SAExpirationDate = 2030-01-01 00:00:00.000 $$<Configuration Manager Setup><04-03-2023 13:46:15.044+240><thread=2500 (0x9C4)> INFO: ACTIVE SA and branch pSetupInf->dwSABranchStatus = 3 $$<Configuration Manager Setup><04-03-2023 13:46:15.059+240><thread=2500 (0x9C4)> INFO: Validating characters in path from Program Files\Microsoft Configuration Manager $$<Configuration Manager Setup><04-03-2023 13:46:15.059+240><thread=2500 (0x9C4)> INFO: GenerateProductID, Dll path:D:\SMSSETUP\BIN\X64\PidGenX.dll. $$<Configuration Manager Setup><04-03-2023 13:46:15.075+240><thread=2500 (0x9C4)> INFO: Specified product key is for VL. $$<Configuration Manager Setup><04-03-2023 13:46:16.387+240><thread=2500 (0x9C4)> INFO: VL or OEM Product Key was specified. $$<Configuration Manager Setup><04-03-2023 13:46:16.387+240><thread=2500 (0x9C4)> INFO: Installing Full version. $$<Configuration Manager Setup><04-03-2023 13:46:16.403+240><thread=2500 (0x9C4)> INFO: 'SCCM01.domain.local' is a valid FQDN. $$<Configuration Manager Setup><04-03-2023 13:46:16.403+240><thread=2500 (0x9C4)> INFO: 'SCCM01.domain.local' is a valid FQDN. $$<Configuration Manager Setup><04-03-2023 13:46:16.418+240><thread=2500 (0x9C4)> INFO: Failed to connect to registry to determine if Configuration Manager console is installed. Configuration Manager console may not be installed. $$<Configuration Manager Setup><04-03-2023 13:46:16.434+240><thread=2500 (0x9C4)> INFO: 'SQL-01.domain.local' is a valid FQDN. $$<Configuration Manager Setup><04-03-2023 13:46:16.434+240><thread=2500 (0x9C4)> INFO: Read SQL Data and Log file Path from script file if specified. $$<Configuration Manager Setup><04-03-2023 13:46:16.451+240><thread=2500 (0x9C4)> INFO: Validating correct drive letter. $$<Configuration Manager Setup><04-03-2023 13:46:16.466+240><thread=2500 (0x9C4)> INFO: Validating correct drive letter. $$<Configuration Manager Setup><04-03-2023 13:46:16.466+240><thread=2500 (0x9C4)> INFO: This isn't a named instance SQL Server. $$<Configuration Manager Setup><04-03-2023 13:46:16.481+240><thread=2500 (0x9C4)> INFO: SQL Server instance name (pSetupInf->SqlInstName): $$<Configuration Manager Setup><04-03-2023 13:46:16.481+240><thread=2500 (0x9C4)> INFO: SQL Server master database (pSetupInf->SqlMasterDB): master $$<Configuration Manager Setup><04-03-2023 13:46:16.497+240><thread=2500 (0x9C4)> INFO: Site SQL Server database name (pSetupInf->SqlDatabaseName): CM_001 $$<Configuration Manager Setup><04-03-2023 13:46:16.512+240><thread=2500 (0x9C4)> INFO: Site SQL Server computer name (pSetupInf->SqlServer): SQL-01.domain.local $$<Configuration Manager Setup><04-03-2023 13:46:16.512+240><thread=2500 (0x9C4)> INFO: Site SQL Server Data File Path (pSetupInf->SqlDataFilePath): M:\Data $$<Configuration Manager Setup><04-03-2023 13:46:16.528+240><thread=2500 (0x9C4)> INFO: Site SQL Server Log File Path (pSetupInf->SqlLogFilePath): L:\Logs $$<Configuration Manager Setup><04-03-2023 13:46:16.528+240><thread=2500 (0x9C4)> INFO: Site SQL Server service port : 1433 $$<Configuration Manager Setup><04-03-2023 13:46:16.544+240><thread=2500 (0x9C4)> INFO: Site SQL Server SSB port : 4022 $$<Configuration Manager Setup><04-03-2023 13:46:16.559+240><thread=2500 (0x9C4)> Configure Sql server alias DBMSSOCN,SQL-01.domain.local,1433 $$<Configuration Manager Setup><04-03-2023 13:46:16.559+240><thread=2500 (0x9C4)> INFO: Registered type SQL-01.domain.local MASTER for SQL-01.domain.local master $$<Configuration Manager Setup><04-03-2023 13:46:16.575+240><thread=2500 (0x9C4)> INFO: Registered type SMS Master for SQL-01.domain.local master $$<Configuration Manager Setup><04-03-2023 13:46:16.590+240><thread=2500 (0x9C4)> INFO: Registered type SQL-01.domain.local CM_001 for SQL-01.domain.local CM_001 $$<Configuration Manager Setup><04-03-2023 13:46:16.606+240><thread=2500 (0x9C4)> INFO: Registered type SMS ACCESS for SQL-01.domain.local CM_001 $$<Configuration Manager Setup><04-03-2023 13:46:16.606+240><thread=2500 (0x9C4)> INFO: SQL Connection succeeded. Connection: SQL-01.domain.local MASTER, Type: Unsecure $$<Configuration Manager Setup><04-03-2023 13:46:16.622+240><thread=2500 (0x9C4)> INFO: SQL Server SQL-01.domain.local is not clustered. $$<Configuration Manager Setup><04-03-2023 13:46:16.637+240><thread=2500 (0x9C4)> INFO: SQL Connection succeeded. Connection: SQL-01.domain.local MASTER, Type: Unsecure $$<Configuration Manager Setup><04-03-2023 13:46:16.637+240><thread=2500 (0x9C4)> INFO: SQL Always On is NOT enabled in this environment. $$<Configuration Manager Setup><04-03-2023 13:46:16.653+240><thread=2500 (0x9C4)> INFO: Enough free disk space.~ $$<Configuration Manager Setup><04-03-2023 13:46:16.684+240><thread=2500 (0x9C4)> INFO: Checking Active Directory, domain controller for domain domain is \DC01 $$<Configuration Manager Setup><04-03-2023 13:46:16.809+240><thread=2500 (0x9C4)> CurrentVersion = 6.3 $$<Configuration Manager Setup><04-03-2023 13:46:16.872+240><thread=2500 (0x9C4)> INFO: SQL Server version detected is 15.0, 15.0.2101.7.~ $$<Configuration Manager Setup><04-03-2023 13:46:16.887+240><thread=2500 (0x9C4)> INFO: File \?\C:\Windows\system32\sms_account_test_svc.exe does not exist. No zapping needed. $$<Configuration Manager Setup><04-03-2023 13:46:16.903+240><thread=2500 (0x9C4)> INFO: Verified computer account by installing service SMS_ACCOUNT_TEST_SERVICE~ $$<Configuration Manager Setup><04-03-2023 13:46:45.684+240><thread=2500 (0x9C4)> INFO: Extracted file C:\Users\VSPRAG~1\AppData\Local\Temp\ConfigMgr.Manifest.xml $$<Configuration Manager Setup><04-03-2023 13:46:45.747+240><thread=2500 (0x9C4)> INFO: Processing file group "Dot_Net_Framework" $$<Configuration Manager Setup><04-03-2023 13:46:45.747+240><thread=2500 (0x9C4)> INFO: Processing file "NDP462-KB3151800-x86-x64-AllOS-ENU.exe" $$<Configuration Manager Setup><04-03-2023 13:46:45.762+240><thread=2500 (0x9C4)> INFO: File will be downloaded from https://go.microsoft.com/fwlink/?LinkID=2171070. $$<Configuration Manager Setup><04-03-2023 13:46:45.778+240><thread=2500 (0x9C4)> INFO: File for NDP462-KB3151800-x86-x64-AllOS-ENU.exe [.NET Framework Extended 4.6.2 RTM] will be copied with file name: NDP462-KB3151800-x86-x64-AllOS-ENU.exe. $$<Configuration Manager Setup><04-03-2023 13:46:45.778+240><thread=2500 (0x9C4)> INFO: Processing file group "SQL_Redist" $$<Configuration Manager Setup><04-03-2023 13:46:45.793+240><thread=2500 (0x9C4)> INFO: Processing file "SQLEXPR_x64_ENU.exe" $$<Configuration Manager Setup><04-03-2023 13:46:45.809+240><thread=2500 (0x9C4)> INFO: File will be downloaded from https://go.microsoft.com/fwlink/?linkid=2115683. $$<Configuration Manager Setup><04-03-2023 13:46:45.809+240><thread=2500 (0x9C4)> INFO: File for SQLEXPR_x64_ENU.exe [SQL Server 2016 Express] will be copied with file name: SQLEXPR_x64_ENU.exe. $$<Configuration Manager Setup><04-03-2023 13:46:45.825+240><thread=2500 (0x9C4)> INFO: Processing file "sqlncli.msi" $$<Configuration Manager Setup><04-03-2023 13:46:45.825+240><thread=2500 (0x9C4)> INFO: File will be downloaded from https://go.microsoft.com/fwlink/?linkid=2115684. $$<Configuration Manager Setup><04-03-2023 13:46:45.840+240><thread=2500 (0x9C4)> INFO: File for sqlncli.msi [SQL Server 2016 Native Client] will be copied with file name: sqlncli.msi. $$<Configuration Manager Setup><04-03-2023 13:46:45.856+240><thread=2500 (0x9C4)> INFO: Processing file "SQLSysClrTypes.msi" $$<Configuration Manager Setup><04-03-2023 13:46:45.856+240><thread=2500 (0x9C4)> INFO: File will be downloaded from https://go.microsoft.com/fwlink/?LinkId=2115685. $$<Configuration Manager Setup><04-03-2023 13:46:45.872+240><thread=2500 (0x9C4)> INFO: File for SQLSysClrTypes.msi [SQL Server 2014 System CLR Types] will be copied with file name: SQLSysClrTypes.msi. $$<Configuration Manager Setup><04-03-2023 13:46:45.887+240><thread=2500 (0x9C4)> INFO: Processing file "SharedManagementObjects.msi" $$<Configuration Manager Setup><04-03-2023 13:46:45.887+240><thread=2500 (0x9C4)> INFO: File will be downloaded from https://go.microsoft.com/fwlink/?LinkID=2115592. $$<Configuration Manager Setup><04-03-2023 13:46:45.903+240><thread=2500 (0x9C4)> INFO: File for SharedManagementObjects.msi [SQL Server 2014 Shared Management Objects] will be copied with file name: SharedManagementObjects.msi. $$<Configuration Manager Setup><04-03-2023 13:46:45.903+240><thread=2500 (0x9C4)> INFO: Processing file "ConfigMgr.AutoUpgradeScripts.cab" $$<Configuration Manager Setup><04-03-2023 13:46:45.918+240><thread=2500 (0x9C4)> INFO: File will be downloaded from https://go.microsoft.com/fwlink/?LinkID=2189439. $$<Configuration Manager Setup><04-03-2023 13:46:45.934+240><thread=2500 (0x9C4)> INFO: File for ConfigMgr.AutoUpgradeScripts.cab [Configuration Manager Auto Upgrade Scripts] will be copied with file name: ConfigMgr.AutoUpgradeScripts.cab. $$<Configuration Manager Setup><04-03-2023 13:46:45.934+240><thread=2500 (0x9C4)> INFO: Processing file "ConfigMgr.AutoUpgradeScripts.cab" $$<Configuration Manager Setup><04-03-2023 13:46:45.950+240><thread=2500 (0x9C4)> INFO: Ignoring manifest entry "C (C)" that is not applicable to release build. $$<Configuration Manager Setup><04-03-2023 13:46:45.965+240><thread=2500 (0x9C4)> INFO: Processing file group "MMA" $$<Configuration Manager Setup><04-03-2023 13:46:45.965+240><thread=2500 (0x9C4)> INFO: Processing file "MMASetup-AMD64.exe" $$<Configuration Manager Setup><04-03-2023 13:46:45.981+240><thread=2500 (0x9C4)> INFO: File will be downloaded from https://go.microsoft.com/fwlink/?LinkID=2149695. $$<Configuration Manager Setup><04-03-2023 13:46:45.981+240><thread=2500 (0x9C4)> INFO: File for MMASetup-AMD64.exe [MMA Agent x64] will be copied with file name: MMASetup-AMD64.exe. $$<Configuration Manager Setup><04-03-2023 13:46:45.997+240><thread=2500 (0x9C4)> INFO: Processing file "MMASetup-i386.exe" $$<Configuration Manager Setup><04-03-2023 13:46:46.012+240><thread=2500 (0x9C4)> INFO: File will be downloaded from https://go.microsoft.com/fwlink/?LinkID=2149696. $$<Configuration Manager Setup><04-03-2023 13:46:46.012+240><thread=2500 (0x9C4)> INFO: File for MMASetup-i386.exe [MMA Agent x86] will be copied with file name: MMASetup-i386.exe. $$<Configuration Manager Setup><04-03-2023 13:46:46.028+240><thread=2500 (0x9C4)> INFO: Processing file group "DoincInstall" $$<Configuration Manager Setup><04-03-2023 13:46:46.028+240><thread=2500 (0x9C4)> INFO: Processing file "DoincInstall.exe" $$<Configuration Manager Setup><04-03-2023 13:46:46.043+240><thread=2500 (0x9C4)> INFO: File will be downloaded from https://go.microsoft.com/fwlink/?linkid=2183172. $$<Configuration Manager Setup><04-03-2023 13:46:46.059+240><thread=2500 (0x9C4)> INFO: File for DoincInstall.exe [DOINC Install] will be copied with file name: DoincInstall.exe. $$<Configuration Manager Setup><04-03-2023 13:46:46.059+240><thread=2500 (0x9C4)> INFO: Processing file group "WebView2" $$<Configuration Manager Setup><04-03-2023 13:46:46.075+240><thread=2500 (0x9C4)> INFO: Processing file "Microsoft.WebView2.FixedVersionRuntime.x86.cab" $$<Configuration Manager Setup><04-03-2023 13:46:46.090+240><thread=2500 (0x9C4)> INFO: File will be downloaded from https://go.microsoft.com/fwlink/?linkid=2186362. $$<Configuration Manager Setup><04-03-2023 13:46:46.090+240><thread=2500 (0x9C4)> INFO: File for Microsoft.WebView2.FixedVersionRuntime.x86.cab [WebView2] will be copied with file name: Microsoft.WebView2.FixedVersionRuntime.x86.cab. $$<Configuration Manager Setup><04-03-2023 13:46:46.106+240><thread=2500 (0x9C4)> INFO: skip running prereq check. $$<Configuration Manager Setup><04-03-2023 13:46:46.106+240><thread=2500 (0x9C4)> INFO: Installing site. $$<Configuration Manager Setup><04-03-2023 13:46:46.122+240><thread=2500 (0x9C4)> INFO: SCCM01.domain.local is not joining (CAS) hierarchy. CAS Server has to be specified. $$<Configuration Manager Setup><04-03-2023 13:46:46.137+240><thread=2500 (0x9C4)> INFO: Checking Service Account: Sql server:<SQL-01.domain.local>, Instance:<>, Service Account:<domain\sqlsvc>. $$<Configuration Manager Setup><04-03-2023 13:47:07.153+240><thread=2500 (0x9C4)> INFO: Checking Installed SMS componants on:SCCM01.domain.local. $$<Configuration Manager Setup><04-03-2023 13:47:07.153+240><thread=2500 (0x9C4)> INFO: Checking SQLNCli version on ServerName SCCM01 $$<Configuration Manager Setup><04-03-2023 13:47:07.168+240><thread=2500 (0x9C4)> INFO: SQLNCli version is 11.4.7001.0 $$<Configuration Manager Setup><04-03-2023 13:47:07.184+240><thread=2500 (0x9C4)> INFO: SQL Server Native Client had been installed already. $$<Configuration Manager Setup><04-03-2023 13:47:07.184+240><thread=2500 (0x9C4)> [SQL Common Language Runtime types] with version 12.0.2402.11 is already installed $$<Configuration Manager Setup><04-03-2023 13:47:07.200+240><thread=2500 (0x9C4)> [SQL Server Shared Management Objects] with version 12.0.2000.8 is already installed $$<Configuration Manager Setup><04-03-2023 13:47:07.215+240><thread=2500 (0x9C4)> INFO: Found ADK 10 installed on SCCM01.domain.local at 'C:\Program Files (x86)\Windows Kits\10'. $$<Configuration Manager Setup><04-03-2023 13:47:07.215+240><thread=2500 (0x9C4)> INFO: 'User State Migration Tool' component of ADK 10 is installed. $$<Configuration Manager Setup><04-03-2023 13:47:07.235+240><thread=2500 (0x9C4)> INFO: 'USMT' component of ADK 10 found on <SCCM01.domain.local>. ADK 10 is the latest $$<Configuration Manager Setup><04-03-2023 13:47:07.246+240><thread=2500 (0x9C4)> [Visual C++ 2015-2019 Redistributable (x64)] with version 14.32.31326 is already installed $$<Configuration Manager Setup><04-03-2023 13:47:07.246+240><thread=2500 (0x9C4)> [Visual C++ 2015-2019 Redistributable (x86)] with version 14.32.31326 is already installed $$<Configuration Manager Setup><04-03-2023 13:47:07.262+240><thread=2500 (0x9C4)> Make sure there is crypto key generated for the site server. $$<Configuration Manager Setup><04-03-2023 13:47:07.278+240><thread=2500 (0x9C4)> crypto key is not found. Generate crypt key. $$<Configuration Manager Setup><04-03-2023 13:47:14.481+240><thread=2500 (0x9C4)> site server has crypto key. public key is 0602000000A40000525341310008000001000100354E3A59B31F5F34A1114C9A4F05CDA7ADB663361EDE67BBEB3CE26961F7... $$<Configuration Manager Setup><04-03-2023 13:47:14.496+240><thread=2500 (0x9C4)> INFO: Configuring SQL trace flags for server SQL-01.domain.local $$<Configuration Manager Setup><04-03-2023 13:47:14.512+240><thread=2500 (0x9C4)> INFO: Setting -T8295 SQL Server Param already exists as SQLArg3. $$<Configuration Manager Setup><04-03-2023 13:47:14.622+240><thread=2500 (0x9C4)> INFO: Name for SQL Server Param string value is SQLArg4. $$<Configuration Manager Setup><04-03-2023 13:47:14.653+240><thread=2500 (0x9C4)> INFO: Creating SQL Server machine certificate for Server [SQL-01.domain.local]... $$<Configuration Manager Setup><04-03-2023 13:47:14.668+240><thread=2500 (0x9C4)> INFO: 'SQL-01.domain.local' is a valid FQDN. $$<Configuration Manager Setup><04-03-2023 13:47:14.684+240><thread=2500 (0x9C4)> Deinstalled existing service SMS_SERVER_BOOTSTRAP_SCCM01.domain.local_SMS_SQL_SERVER. $$<Configuration Manager Setup><04-03-2023 13:48:38.950+240><thread=2500 (0x9C4)> Installing service SMS_SERVER_BOOTSTRAP_SCCM01.domain.local_SMS_SQL_SERVER on remote server SQL-01.domain.local ... $$<Configuration Manager Setup><04-03-2023 13:48:38.965+240><thread=2500 (0x9C4)> Installed service SMS_SERVER_BOOTSTRAP_SCCM01.domain.local_SMS_SQL_SERVER on remote server SQL-01.domain.local $$<Configuration Manager Setup><04-03-2023 13:48:59.981+240><thread=2500 (0x9C4)> Starting installed service SMS_SERVER_BOOTSTRAP_SCCM01.domain.local_SMS_SQL_SERVER on remote server with command-line arguments "001 C:\SMS_SCCM01.domain.local_SMS_SQL_SERVER0 /createcertificate SOFTWARE\MicrosoftCertBootStrap\ SMS_SQL_SERVER"... $$<Configuration Manager Setup><04-03-2023 13:48:59.997+240><thread=2500 (0x9C4)> Could not start service SMS_SERVER_BOOTSTRAP_SCCM01.domain.local_SMS_SQL_SERVER. The operating system reported error 1008: $$<Configuration Manager Setup><04-03-2023 14:47:38.962+240><thread=2500 (0x9C4)> ERROR: Failed to create SQL Server certificate on server SQL-01.domain.local $$<Configuration Manager Setup><04-03-2023 14:47:38.977+240><thread=2500 (0x9C4)> ERROR: Failed to create SQL Server [SQL-01.domain.local] certificate remotely. $$<Configuration Manager Setup><04-03-2023 14:47:38.977+240><thread=2500 (0x9C4)> Not recovery mode or not top level site. Skip restoring client piloting packages. $$<Configuration Manager Setup><04-03-2023 14:47:38.993+240><thread=2500 (0x9C4)> ~~===================== Completed Configuration Manager Server Setup ===================== $$<Configuration Manager Setup><04-03-2023 14:47:39.009+240><thread=2500 (0x9C4)>

Answer 1

For clarity, you make the site server computer account sa within Sql too?

Answer 2

Hi @Vincent Sprague, 

1, We may try to reinstall the SQL Server.

2, Besides, have you validated connectivity using a UDL file?
The reference link: Test remote SQL connectivity EASILY!

3, this is another similar threader for your reference:

https://technet440.rssing.com/chan-6827930/article13143.html

Note: Microsoft provides third-party contact information to help you understand the problem. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

Looking forward to your feedback.

Best regards

Cherry

Answer 3

My issue turned out to be firewall related. The Windows firewall was blocking something, I'm just not sure what. The typical SQL ports like 1433 and 1434 were open as was SMB access and I have other servers using this SQL server so the SQL server itself is fine. I disabled the firewall and the install succeeded. After the install finished I re-enabled the firewall and everything appears to still be working.

Answer 4

Hi @Vincent Sprague,

Thanks for your feedback. We're glad that the question is fixed now. It's appreciated that you could click "Accept Answer" to the helpful reply, this will help other users to search for useful information more quickly. Here's a short summary for the problem.

Problem/Symptom:
SCCM install is failing "ERROR: Failed to create SQL Server certificate on server".

Solution/Workaround:
Disabled the firewall and the install succeeded.

Thanks again for your time!

Best regards,
Cherry

Answer 5

@Vincent Sprague you don't need to disable anything. Just add the incoming "Windows Management Instrumentation" rules to your firewall.
That's what setup will use. I recommend you to enable them anyway because they are used during upgrades and maintenance.

I usually also enable "Remote Service Management" and a few others to allow administering my servers from a management workstation.