GetDPAuthDownloadToken() failed 80004005. Unable to get the Distribution Point auth token from Management Point

Question

Hi,

Download of Operating system image fails after specific run time. Below is the status message

The task sequence execution engine failed executing the action (Apply Operating System Image) in the group (Apply OS) with the error code 2147942402
Action output: ... s\CON0060A.
WinHttpReadData() failed.
ReadDataAndWriteToFile() failed. 80072efe
ReadDataAndWriteToFile() failed for C:_SMSTaskSequence\Packages\CON0060A\Windows 10.wim. 5%
DownloadFileWithRanges() failed. 80072efe.
DownloadFile() failed for http://DP1.contoso.net:443/NOCERT_SMS_DP_SMSPKG$/CON0060A/sccm?/Windows%10.wim, C:_SMSTaskSequence\Packages\CON0060A\Windows 10.wim. 80072efe.
DownloadFiles() failed. 80072efe.
Download() failed. 80072efe.
Installation of image 1 in package failed to complete. The system cannot find the file specified. (Error: 80070002; Source: Windows)
The user tries to release a source directory C:_SMSTaskSequence\Packages\CON0060A that is either already released or we have not connected to it.
InstallImage( g_InstallPackageID, g_ImageIndex, targetVolume, ImageType_OS, g_ConfigPackageID, g_ConfigFileName, bOEMMedia, g_RunFromNet ), HRESULT=80070002 (applyos.cpp,513). The operating system reported error 2147942402: The system cannot find the file specified.

Below is from smsts.log
GetDPAuthDownloadToken() failed. 80004005. Unable to get the Distribution Point auth token from Management Point

WinHttpReceiveResponse failed.
SendWinHttpRequest failed. 80072efe.
SendWinHttpRequest (hSession, hConnect, hRequest, pszSourcePath, sWinHttpAdditionalHeader.c_str(), bUseSSL, ullContentLength, LastGoodCredentialsType, pszPeerToken, pszPeerKey, bIsPeer, pszDPAuthToken, bDPAuthCapable), HRESULT=80072efe (..\downloadcontent.cpp,1599)
DownloadFileWithRanges() failed. 80072efe.

File: http://DP.contoso.net:443/**NOCERT_SMS_DP_SMSPKG$**/CBP00835/sccm?/Servicing/x86/api-ms-win-core-apiquery-l1-1-0.dll

Network team have removed all the filtering. This issue happens from only one secondary site server. OSD happens in other site servers
Please help what could be the issue and how to solve it.

also what is meant by NOCERT_SMS_DP_SMSPKG$

Answer 1

@Boopathi S
Thank you for posting in Microsoft Q&A forum.
Have you specific an unattend.xml file in the Apply OS task that doesn't exist. Check what you have configured there and that it exists in the package specified there as well.
And check if we configured the Network Access Account?
The NOCERT_SMS_DP_SMSPKG$ does not mean that no cert is used. It just means that cert that the client presents to the server does not need a subject name that matches the client's machine name. This is because WinPE clients don't have real machine names. Certs are still used. The traffic is still HTTPS.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.