Cannot install SCCM Client

Dominique DUCHEMIN 831 Reputation points
2020-11-24T04:08:21.043+00:00

Hello,

MEM-CM 2006

I have the following error on clients:

>>> Client selected the PKI Certificate [Thumbprint 788C14F3BD4BC5D8443B6C968A37E47605158DB7] issued to 'OISSCERTTEST.adtest' ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)

ccmsetup: Host=VITSCCMCB.adtest, Path=/ccm_system/request, Port=443, Protocol=https, CcmTokenAuth=0, Flags=0x4300, Options=0x43f ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
Created connection on port 443 ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
Enabled SSL revocation check. ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
Trying without proxy. ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
[CCMHTTP] AsyncCallback(): ----------------------------------------------------------------- ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
[CCMHTTP] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
[CCMHTTP] : dwStatusInformationLength is 4
ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
[CCMHTTP] : *lpvStatusInformation is 0x8
ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
[CCMHTTP] : WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set
ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
[CCMHTTP] AsyncCallback(): ----------------------------------------------------------------- ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
Failed in WinHttpSendRequest API, ErrorCode = 0x2f8f ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
[CCMHTTP] ERROR: URL=https://VITSCCMCB.adtest/ccm_system/request, Port=443, Options=1087, Code=12175, Text=ERROR_WINHTTP_SECURE_FAILURE ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
[CCMHTTP] ERROR INFO: StatusCode=200 StatusText= ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
Failed (0x80072f8f) to send location request to 'VITSCCMCB.adtest'. StatusCode 200, StatusText '' ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
Failed to send location message to 'HTTPS://VITSCCMCB.adtest'. Status text '' ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
GetDPLocations failed with error 0x80072f8f ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
Failed to get DP locations as the expected version from MP 'HTTPS://VITSCCMCB.adtest'. Error 0x80072f8f ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
Sending state '101'... ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
Updating MDM_ConfigSetting.ClientDeploymentErrorCode with value 0 ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
Failed to get client version for sending state messages. Error 0x8004100e ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
[] Params to send '5.0.9012.1010 Deployment Error: 0x0, ' ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)
A Fallback Status Point has not been specified and no client was installed. Message with STATEID='101' will not be sent. ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)

Failed to send status 101. Error (87D00215) ccmsetup 11/23/2020 5:23:30 PM 9532 (0x253C)

I checked the firewall Network and OS and did not find issue

Client Installation Porperties

SMSSITECODE=UCT DNSSUFFIX=adtest SMSMP=VITSCCMCB.adtest CCMHOSTNAME=SCCMTinternet.adtest

Where should I check for the issue?

Thanks,
DOm

Not Monitored
Not Monitored
Tag not monitored by Microsoft.
39,119 questions
0 comments No comments
{count} votes

Accepted answer
  1. Dominique DUCHEMIN 831 Reputation points
    2020-11-25T03:02:27.473+00:00
    1. Reinstallation of certificate
    2. Correction of firewall
    3. Removal & adding the site system in the boundary group

    resolved now

    The client installed ...


1 additional answer

Sort by: Most helpful
  1. Dominique DUCHEMIN 831 Reputation points
    2020-11-24T16:13:31.913+00:00

    Hello,

    Some additional information
    I saw in MPControl.log this message...

    Certificate is not issued by SCCM.
    SSL binding on port 443 isn't with CCM generated cert.

    Is it related to my issue?

    Thanks,
    Dom42186-2020-11-24-8-14-58-oisscerttest-available-certs.png


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.