Client Install Error

Question

Hi Guys

On a couple of VDis I am installing SCCM client on it installs correctly with a 0 code but I look in the ClientIDStartManager.log I see the error

Regtask: Failed to get certificate . Error 0x80004005

I dont use PKI and its only happening on like 5 VDIs.

Anyone see this error?

Answer 1

Hi RaimondiAnthonyCognizant,

I think you have permissions problem for machine key starts with 19c5cf.. located under C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys

Ensure 'CNG Key Isolation' Service is not disabled. If you find it disabled, then change it to Manual and save the changes to service.

Note - Please take backup copy of MachineKeys folder before proceeding below -

Resolution:

Correct permission for the file that starts with 19c5cf.. under C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys folder
Expected permissions :
System: full control
Local Administrators: read and execute
Restart SMS Agent Host service after setting permissions should create the certificate

Answer 2

Hi,

Please try to delete all files in the C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys folder.
Restart the SMS Agent Host Service to recreate these certificates.
At this point the clients should start showing up in the console. If not, remove and push the client agent to the affected computers again.