Cannot see any newer version in Updates and Servicing

Question

Cannot see any newer version in Updates and Servicing

CUCOOPE 191

Hi. In a site that is currently in 2103, we'd like to peform an in-place upgrade to Version 2203 via Update and Servicing. But in the "Update and Servicing" tab, I can only see a single "Configuration Manager 2103" in the tab. Our "service and connection point" was offline before and it was switched to "Online" now. But we still cannot see anything shows up in the tab even after clicking "Check for updates" for a few days.

I've tried the Microsoft's troubleshooting steps for Updates and Servicing and found the following warnings in dmpdownloader.log:

After some research, I tried following the "Case 2" of the troubleshooting steps and tried the connection with the URL http://download.windowsupdate.com/windowsupdate/redist/standalone/7.4.7600.226/windowsupdateagent30-x86.exe but the file was successfully downloaded.

    Download manifest.cab	SMS_DMP_DOWNLOADER	5/19/2022 12:16:32 AM	11140 (0x2B84)  
    Redirected to URL https://download.microsoft.com/download/3/0/c/30c36272-1f21-4e0c-8850-0c338308347a/14.CM2203E12/ConfigMgr.Update.Manifest.cab	SMS_DMP_DOWNLOADER	5/19/2022 12:16:33 AM	11140 (0x2B84)  
    Got fwdlink and recreating the httprequest/response	SMS_DMP_DOWNLOADER	5/19/2022 12:16:33 AM	11140 (0x2B84)  
    STATMSG: ID=9701 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_DMP_DOWNLOADER" SYS=<Siteserver.domain.com SITE=SITECODE PID=13304 TID=11140 GMTDATE=Wed May 18 16:16:33.813 2022 ISTR0="" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 LE=0X0	SMS_DMP_DOWNLOADER	5/19/2022 12:16:33 AM	11140 (0x2B84)  
    WARNING: Failed to download easy setup payload with exception: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.	SMS_DMP_DOWNLOADER	5/19/2022 12:16:33 AM	11140 (0x2B84)  
    WARNING: Retry in the next polling cycle	SMS_DMP_DOWNLOADER	5/19/2022 12:16:33 AM	11140 (0x2B84)  
    Download QFE payloads	SMS_DMP_DOWNLOADER	5/19/2022 12:16:33 AM	11140 (0x2B84)  
    Generating state message: 14 for package 00000000-0000-0000-0000-000000000000	SMS_DMP_DOWNLOADER	5/19/2022 12:16:33 AM	11140 (0x2B84)  
    Write the state message in C:\Program Files\Microsoft Configuration Manager\inboxes\auth\statesys.box\incoming\high\___CMUr21rtrqn.SMX	SMS_DMP_DOWNLOADER	5/19/2022 12:16:33 AM	11140 (0x2B84)  
    Successfully Dropped the state message 14	SMS_DMP_DOWNLOADER	5/19/2022 12:16:33 AM	11140 (0x2B84)  
    ...

Then I tried to follow service-connection-point-not-download-updates but checked that the Baltimore CyberTrust Root certificate is present and the status is ok. I have run out of ideas now. Has anyone experienced this before? How can I get the updates to show up ini Updates and Servicing? Thanks.

Answer accepted by question author

1 additional answer

Your answer

Answer 1

Rita Hu -MSFT 9,661

@CUCOOPE
Thanks very much for your feedback. We're glad that the question is solved now. Here's a short summary for the problem , this will help other users to search for useful information more quickly.

Problem/Symptom:
Cannot see any newer version in Updates and Servicing and the SCP failed to download the manifest cab file.

Solution/Workaround:
Proxy issue

Best regards,
Rita

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

CUCOOPE 191 Reputation points

2022-05-25T06:27:16.573+00:00

Thanks!!!
Rita Hu -MSFT 9,661 Reputation points

2022-05-25T06:29:06.913+00:00

Thanks for your accepting :-)

Have a great day.

Rita

Answer 2

Rita Hu -MSFT 9,661

@CUCOOPE
Thanks for your posting on Q&A.

It seems that it is a known issue. Please follow the below Official Document and resolve the issue:
https://learn.microsoft.com/en-us/troubleshoot/mem/configmgr/service-connection-point-not-download-updates

Please keep us in touch if there are any updates or questios of the case.

Wish you have a great weekend.

Best regards,
Rita

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

CUCOOPE 191 Reputation points

2022-05-20T03:07:11.777+00:00

Thanks for your reply. But just as I've mentioned, the certificate is present in mmc and in the correct place without expiring and it said "the certificate is ok". Does that mean the issue is not related to this Baltimore CyberTrust Root certificate?
Rita Hu -MSFT 9,661 Reputation points

2022-05-20T03:11:20.547+00:00

The situation looks like it is. May I know if you have enabled the TLS 1.2 in your envinronment?

Please follow the below link to enable TLS 1.2 in your environment if you haven't tried before:
https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/security/enable-tls-1-2-server
CUCOOPE 191 Reputation points

2022-05-20T03:27:26.1+00:00

I may have to ask our client to confirm (IIRC it is enabled). In the meantime I'd like to add on some more information is that this environment has upgraded once before from 1906 to 2103. So it is a bit weird that it doesn't work this time...
Rita Hu -MSFT 9,661 Reputation points

2022-05-20T06:44:39.12+00:00
Thanks for your time.

In order to help us research further, please help to provide the following log files:

Hman.log DMPDownloader.log

I have reviewed the DMPDownloader.log in my environment and it seems that the Site Server is trying to access the https://download.microsoft.com/download/D/6/5/D65270B2-EAFD-43FD-B9BA-F65CA00B153E/TrustedTpm.cab URL to get the manifest file. Please try to open the IE browser in your Site Server and browse to the URL to rule out the firewall or proxy issue.

Reference link:
https://learn.microsoft.com/en-us/troubleshoot/mem/configmgr/understand-troubleshoot-updates-servicing#troubleshoot-downloading-issues

In addition, have you tried to uninstall the Service connection point and reinstall it. Then we could check whether it is helpful.

Thanks for your cooperation.

Have a great weekend.

Best regards,
Rita
CUCOOPE 191 Reputation points

2022-05-20T07:46:02.323+00:00

Tried to reinstall the service connection pointbut didn't help. The log files are here(I have done some adjustments to change the name of the sitecode, domain etc for obvious reasons btw):203890-hman.log 203960-endpointconnectivitycheckworker.log 204043-dmpdownloader.log
Rita Hu -MSFT 9,661 Reputation points

2022-05-23T07:26:06.223+00:00

@CUCOOPE
Thanks for your response.

The error occurred when the SCP tried to download the manifest cab file. Downloading the manifest cab file is the first step of the SCP to get the new version updates. Please try to open the IE browser and print the URL: https://download.microsoft.com/download/5/2/C/52C5F0D5-2095-4227-BBA4-D3205D9B9714/ConfigMgr.Update.Manifest.cab and check whether cloud-connected services are available.

Best regards,
Rita
CUCOOPE 191 Reputation points

2022-05-25T06:14:38.697+00:00

Thanks for helping out. Just got a reply from client that they found it was proxy issue. Fixing that and it can get updates.
Rita Hu -MSFT 9,661 Reputation points

2022-05-25T06:23:56.093+00:00

@CUCOOPE
Thanks for your sharing on this forum. It was as I expected. The site server does not download the necessary files properly. My guess is either a proxy or a firewall issue. I think it's a good thread. It is a good reference for other small partners with the same problem. I'll write another summary. Please don't forget to mark the helpful answer to help others who have the same issue.

Thanks for your time and have a great day.

Regards,
Rita
CUCOOPE 191 Reputation points

2022-05-25T06:25:22.623+00:00

Do I just mark the comment I've just created or the top-level reply you've replied? Cuz I can't see an "accept" button for my comment.

Share via

Cannot see any newer version in Updates and Servicing

1 additional answer

Your answer