mame

Hi, I have successfully installed the SCCM 2012 on one single server (incl. SQL2008R2SP1) and were also successful on some clients that show up on my console. Unfortunately I do have left one client (and any new joined test client) that do not communicate with my MP. Log file MP_RegistrationManager on my SCCM server show following text (part of): [LOG[MP Reg: Processing completed. Completion state = 0]LOG]!><time="15:48:09.770-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="1" thread="4696" file="regtask.cpp:204"> < ![LOG[Processing Registration request from Client 'GUID:F1D4F0BD-70A7-4A9F-9BE9-384A591D94CB']LOG]!><time="15:50:49.688-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="1" thread="1640" file="regtask.cpp:965"> < ![LOG[begin validation of Certificate [Thumbprint 3E23D608C9BDD2EAF429FBB8A3D1CAA1E057810D] issued to 'CLIENTxy']LOG]!><time="15:50:49.688-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="1" thread="1640" file="ccmcert.cpp:1169"> < ![LOG[The certificate chain processed correctly but terminated in a root certificate not trusted per ConfigMgr CTL.]LOG]!><time="15:50:49.704-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="3" thread="1640" file="ccmcert.cpp:951"> < ![LOG[Completed validation of Certificate [Thumbprint 3E23D608C9BDD2EAF429FBB8A3D1CAA1E057810D] issued to 'CLIENTxy']LOG]!><time="15:50:49.704-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="1" thread="1640" file="ccmcert.cpp:1310"> < ![LOG[MP Reg: Client in-band certificate is not valid due to failures in certificate chain validation, Raising status event. Failure HR = 0x800b0109, In-band Cert SubjectName = CLIENTxy]LOG]!><time="15:50:49.704-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="2" thread="1640" file="regtask.cpp:859"> < ![LOG[Raising event: [sMS_CodePage(437), SMS_LocaleID(1033)] instance of MpEvent_CertInvalidChain { ClientID = "GUID:DB1D6BA9-4245-47D4-AC4E-38EA331F64D6"; DateTime = "20120520135049.708000+000"; MachineName = "SCCMserver"; ProcessID = 1060; SubjectName = "CLIENTxy"; ThreadID = 1640; Win32ErrorCode = 2148204809; }; ]LOG]!><time="15:50:49.710-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="1" thread="1640" file="event.cpp:729"> < ![LOG[MP Reg: Registration request body is invalid.]LOG]!><time="15:50:49.710-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="2" thread="1640" file="regtask.cpp:1705"> < ![LOG[MP Reg: Registration failed.]LOG]!><time="15:50:49.710-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="2" thread="1640" file="regtask.cpp:166"> I followed so many links which describe a solution but in anhoy none of them worked for me. All my certificates are 100% equal as well all the registry entries are similar compared on a working WIN7 client with the one that brings up the above error message. Any solution is therefore more then welcome. (just a small note: I am a newbie on SCCM at all) Many thanks, mame

HI, Just thought there should be something similar then this http://www.windows-noob.com/forums/index.php?showtopic=812 which I followed under some small changes. mame

HI, I am wondering if there is a "howto" on installing a SUP for a remote WSUS? Unfortunately my search was not successful.. Many thanks, mame