Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Friday, August 14, 2020 5:16 PM
Hi,
I'm very new to SCCM and I'm getting these errors when trying to push the clients to a test machine. I have the firewall disabled, boundary group set correctly
These are the errors from the ccmsetup log file on the client
Finding certificate by issuer chain returned error 80092004 ccmsetup 8/14/2020 7:30:50 AM 9772 (0x262C)
Unable to find any Certificate based on Certificate Issuers ccmsetup 8/14/2020 7:30:50 AM 9772 (0x262C)
Failed to read assigned site code from registry. Error code = 0x80070002 ccmsetup 8/14/2020 7:30:50 AM 9772 (0x262C)
Finding certificate by issuer chain returned error 80092004 ccmsetup 8/14/2020 7:30:50 AM 9772 (0x262C)
Unable to find any Certificate based on Certificate Issuers ccmsetup 8/14/2020 7:30:50 AM 9772 (0x262C)
Failed to connect to machine policy namespace. 0x8004100e ccmsetup 8/14/2020 7:30:50 AM 9772 (0x262C)
Failed to get client version for sending state messages. Error 0x8004100e ccmsetup 8/14/2020 7:30:50 AM 9772 (0x262C)
IsSslClientAuthEnabled - Determining provisioning mode state failed with 80070002. Defaulting to state of 480. ccmsetup 8/14/2020 7:30:50 AM 9772 (0x262C)
Failed to connect to machine policy namespace. 0x8004100e ccmsetup 8/14/2020 7:30:50 AM 9772 (0x262C)
Client is not allowed to use or doesn't have PKI cert while talking to HTTPS server. ccmsetup 8/14/2020 7:30:50 AM 9772 (0x262C)
Failed (0x87d00454) to send location request to 'REDACTED.com'. StatusCode 200, StatusText '' ccmsetup 8/14/2020 7:30:50 AM 9772 (0x262C)
Failed to send location message to 'HTTPS://REDACTED.com'. Status text '' ccmsetup 8/14/2020 7:30:50 AM 9772 (0x262C)
GetDPLocations failed with error 0x87d00454 ccmsetup 8/14/2020 7:30:50 AM 9772 (0x262C)
Failed to get DP locations as the expected version from MP 'HTTPS://REDACTED.com'. Error 0x87d00454 ccmsetup 8/14/2020 7:30:50 AM 9772 (0x262C)
Failed to get client version for sending state messages. Error 0x8004100e ccmsetup 8/14/2020 7:30:50 AM 9772 (0x262C)
Could not open Wmi_Bridge_Server kegistry key. ccmsetup 8/14/2020 7:33:50 AM 9772 (0x262C)
Failed to connect to policy namespace. Error 0x8004100e ccmsetup 8/14/2020 7:33:50 AM 8984 (0x2318)
Failed to revoke client upgrade local policy. Error 0x8004100e ccmsetup 8/14/2020 7:33:50 AM 8984 (0x2318)
Failed to get client version for sending state messages. Error 0x8004100e ccmsetup 8/14/2020 7:33:50 AM 8984 (0x2318)
CcmSetup failed with error code 0x80004004 ccmsetup 8/14/2020 7:33:50 AM 8984 (0x2318)
Also attached is the ccm log from the server
Received request: "2097152914" for machine name: "SCCMTEST" on queue: "Incoming". SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 6752 (0x1A60)
Stored request "2097152914", machine name "SCCMTEST", in queue "Processing". SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 6752 (0x1A60)
Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097152914, 1 SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 6752 (0x1A60)
======>Begin Processing request: "2097152914", machine name: "SCCMTEST" SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
Execute query exec [sp_IsMPAvailable] N'100' SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> Trying the 'best-shot' account which worked for previous CCRs (index = 0x0) SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> Attempting to connect to administrative share '\SCCMTEST.REDACTED.com\admin$' using account 'REDACTED' SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> SspiEncodeStringsAsAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> SspiExcludePackage succeeded! SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> SspiMarshalAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> NetUseAdd succeeded! SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> The 'best-shot' account has now succeeded 8 times and failed 0 times. SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> Connected to administrative share on machine SCCMTEST.REDACTED.com using account 'REDACTED' SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> Trying the 'best-shot' account which worked for previous CCRs (index = 0x0) SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> Attempting to make IPC connection to share <\SCCMTEST.REDACTED.com\IPC$> with Kerberos authentication SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> SspiEncodeStringsAsAuthIdentity succeeded for IPC$ authentication! SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> SspiExcludePackage succeeded for IPC$ authentication! SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> SspiMarshalAuthIdentity succeeded for IPC$ authentication! SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> NetUseAdd succeeded for IPC$ authentication! SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> Searching for SMSClientInstall.* under '\SCCMTEST.REDACTED.com\admin$\ SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> System OS version string "10.0.19041" converted to 10.00 SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> Unable to connect to WMI (root\ccm) on remote machine "SCCMTEST.REDACTED.com", error = 0x8004100e. SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> Creating \ VerifyingCopying existence of destination directory \SCCMTEST.REDACTED.com\admin$\ccmsetup. SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> Copying client files to \SCCMTEST.REDACTED.com\admin$\ccmsetup. SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> Copying file "E:\Program Files\Microsoft Configuration Manager\bin\I386\MobileClient.tcf" to "MobileClient.tcf" SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> Copying file "E:\Program Files\Microsoft Configuration Manager\bin\I386\ccmsetup.exe" to "ccmsetup.exe" SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:47 AM 2268 (0x08DC)
> ForceReinstall flag is set to true SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:48 AM 2268 (0x08DC)
Submitted request successfully SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:49 AM 6752 (0x1A60)
Getting a new request from queue "Incoming" after 100 millisecond delay. SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:49 AM 6752 (0x1A60)
Waiting for change in directory "E:\Program Files\Microsoft Configuration Manager\inboxes\ccr.box" for queue "Incoming", (30 minute backup timeout). SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:33:49 AM 6752 (0x1A60)
> Updated service "ccmsetup" on machine "SCCMTEST.REDACTED.com". SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:34:03 AM 2268 (0x08DC)
> Started service "ccmsetup" on machine "SCCMTEST.REDACTED.com". SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:34:03 AM 2268 (0x08DC)
> Deleting SMS Client Install Lock File '\SCCMTEST.REDACTED.com\admin$\SMSClientInstall.100' SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:34:03 AM 2268 (0x08DC)
Execute query exec [sp_CP_SetLastErrorCode] 2097152914, 0 SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:34:03 AM 2268 (0x08DC)
> Completed request "2097152914", machine name "SCCMTEST". SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:34:03 AM 2268 (0x08DC)
Deleted request "2097152914", machine name "SCCMTEST" SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:34:03 AM 2268 (0x08DC)
Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097152914, 4 SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:34:03 AM 2268 (0x08DC)
Execute query exec [sp_CP_SetLatest] 2097152914, N'08/14/2020 14:34:03', 15 SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:34:03 AM 2268 (0x08DC)
<======End request: "2097152914", machine name: "SCCMTEST". SMS_CLIENT_CONFIG_MANAGER 8/14/2020 10:34:03 AM 2268 (0x08DC)
Waiting for change in directory "E:\Program Files\Microsoft Configuration Manager\inboxes\ccr.box" for queue "Incoming", (30 minute backup timeout). SMS_CLIENT_CONFIG_MANAGER 8/14/2020 1:03:49 PM 6752 (0x1A60)
Please let me know what you guys think the issue could be.
Thanks!
Matthew H.
All replies (3)
Saturday, August 15, 2020 9:59 PM
On the test workstation, open CertMgr as an administrator. When prompted, choose to access the local computer. Open the 'Personal' folder, and check the validity of the computer's certificate. If there is an expired cert, right-click it, choose All Tasks, and then renew it. If there is no certificate present, request a new certificate. Then test the client deployment again.
Monday, August 17, 2020 3:01 AM
Hi,
It seems the issue is caused by an invalid configuration using HTTPS. Have you configured SCCM for https mode? If you do not configure it correctly, machines will not autoenrolling in machine based certificates, thus, System Center could not authenticate the client and would not allow setup to complete.
So, if you are not using HTTPS (do not have a PKI environment), make sure you have turned off HTTPS configurations for your site.
If you have configured https:
1.Ensure your clients are properly configured for autoenrollment
2.Ensure your clients are actually receiving a machine certificate from autoenrollment
3.Ensure your certificate authority’s certificate and CRL lists are not expired
This "System Center" Forum will be migrating to a new home on Microsoft Q&A, please refer to this sticky post for more details.
Regards,
Allen
"MECM" forum will be migrating to a new home on Microsoft Q&A!
We invite you to post new questions in the "MECM" forum's new home on Microsoft Q&A!
For more information, please refer to the sticky post.
Friday, August 21, 2020 8:43 AM
Hi,
It seems there is no update for a couple of days. May we know the current status of the problem? Is there any other assistance we can provide?
Regards,
Allen
"MECM" forum will be migrating to a new home on Microsoft Q&A!
We invite you to post new questions in the "MECM" forum's new home on Microsoft Q&A!
For more information, please refer to the sticky post.