This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 92%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDD%3C/text%3E%3C/svg%3E)
Hello,
AdminUI Content Download thread is starting... SMS_DMP_DOWNLOADER 11/23/2020 1:42:43 PM 12636 (0x315C)
Download Admin UI content payload SMS_DMP_DOWNLOADER 11/23/2020 1:42:43 PM 12636 (0x315C)
Get AdminUI content cab url SMS_DMP_DOWNLOADER 11/23/2020 1:42:43 PM 12636 (0x315C)
The payload will be downloaded to C:\Program Files\Microsoft Configuration Manager\AdminUIContentPayload\ConfigMgr.AdminUIContent.AUC SMS_DMP_DOWNLOADER 11/23/2020 1:42:43 PM 12636 (0x315C)
Download manifest.cab SMS_DMP_DOWNLOADER 11/23/2020 1:42:43 PM 12636 (0x315C)
Redirected to URL https://<sccm_site_server>/adminuicontent/ConfigMgr.AdminUIContent.cab SMS_DMP_DOWNLOADER 11/23/2020 1:42:43 PM 12636 (0x315C)
Got fwdlink and recreating the httprequest/response SMS_DMP_DOWNLOADER 11/23/2020 1:42:43 PM 12636 (0x315C)
ERROR: Failed to download Admin UI content payload with exception: The underlying connection was closed: An unexpected error occurred on a send. SMS_DMP_DOWNLOADER 11/23/2020 1:42:43 PM 12636 (0x315C)
Failed to call AdminUIContentDownload. error = Error -2146233079 SMS_DMP_DOWNLOADER 11/23/2020 1:42:43 PM 12636 (0x315C)
AdminUI Content Download thread is exiting... SMS_DMP_DOWNLOADER 11/23/2020 1:42:43 PM 12636 (0x315C)
HasIntuneSubscription: Site has no Intune subscription. SMS_DMP_DOWNLOADER 11/23/2020 1:47:43 PM 7104 (0x1BC0)
AdminUI Content Download thread is starting... SMS_DMP_DOWNLOADER 11/23/2020 1:47:43 PM 13708 (0x358C)
===================================================================
It happened on several Primary Server for the various site I am managing...
What is the issue?
Thanks,
Dom
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 68%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EH%3C/text%3E%3C/svg%3E)
I was able to resolve this by allowing our firewall to inspect the traffic so that it initiates the connection on behalf of the Configuration Manager server using TLS 1.2. We need to do some planning before we enforce TLS 1.2 for Configuration Manager in our environment.
Thank you very much for the update and sharing the solution here. I believe this should be useful for someone who has similar issue in the future.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 7.000000000000001%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETU%3C/text%3E%3C/svg%3E)
Hi,
Can you expound on what you had to do within your Firewall to allow this communication? We are now experiencing this same error loop every 5 minutes. We use a Cisco ASA5616 firewall within our environment.
Hi @Tony Upson . The issue is that this connection to Microsoft requires TLS 1.2 now. At the time we had this issue, our site server was still using TLS 1.0 and our firewall was bypassing HTTPs inspection for our servers so the traffic was passing as TLS 1.0. By enabling HTTPs inspection on our Checkpoint firewall the connection then left our network negotiated as TLS 1.2 because the firewall re-negotiated the connection. That was temporary until we upgraded our ConfigMgr servers to Windows Server 2019 and converted our ConfigMgr infrastructure and clients to support TLS 1.2 natively. At that point, we removed the HTTPs inspection done by the firewall because the Site Server communication now had TLS 1.2 enforced. The firewall change we made was a temporary workaround.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(115.19999999999999, 59%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAD%3C/text%3E%3C/svg%3E)
In case somebody stumbles across this post:
Apart from the necessary steps for enabling TLS 1.2 etc, I had to manually enable the following cipher suites (you can use Nartac IIS Crypto for that)
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9f)
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x9e)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 96%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBW%3C/text%3E%3C/svg%3E)
Thanks Andy! This worked for me. Was really stumped after enabling TLS 1.2 but still getting same messages in dmpdownloader.log as the OP.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 0%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
Awesome! Thanks for sharing - resolved the problem!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 72%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJK%3C/text%3E%3C/svg%3E)
Thanks Andy this also fixed the issue for me!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(137.6, 18%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKJ%3C/text%3E%3C/svg%3E)
This worked!!!! I don't like downloading and installing things on production boxes... Two days of hitting my head on my desk and working with our Network folks.. Thank you
Thank you for posting in Microsoft Q&A forum.
To get better support, could we know what operation we do after we seen this error in our dmpdownloader.log? Does it happens updated our site server or someone else? Because i haven't seen you mention it.
May we know how many servers are facing this issue, we said that "several" means more than one less than few servers, right? Have we seen the good one?
Have a nice day!
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
I have the same issue after upgrading my site to 2010. I'm thinking the site server is using either TLS 1.0/1.1 or can't find a compatible cipher suite to negotiate TLS. Can you confirm @Fiona Yan-MSFT if the site https://configmgrbits.azureedge.net/adminuicontent/ConfigMgr.AdminUIContent.cab is now requiring TLS 1.2?
We could check the security protocol on our server side to see if we use the TLS 1.0/1.1 by the following method:
If we use the TLS 1.0/1.1, this protocol is out of lifecycle, we may need to choose TLS 1.2.
Here is a helpful article for you to refer to:
[enabling-tls-v1-2-support-in-sccmenabling-tls-v1-2-support-in-sccm
Note: this is non-official Microsoft article just for your refernce.
The phenomenon of upgrading issue, I will try the best to deliver the information to the product team to see if they have some additional comments, but not guaranteed. once there is a reply, i will get back to you at the first time. thank you for your kind understanding.
Have a nice day!
Hello,
I checked
https://learn.microsoft.com/en-us/archive/blogs/configmgrdogs/configuration-manager-proxy-exceptions
but did not see the URL in the dmpdownloader.log???
Thanks,
Dom