Hi,
I am relatively new to MECM and am having an issue with OSD via config client on all models of computers in our organization. all computers are physical computers.
They are failing at applying device drivers with the following error
Failed to create certificate store from encoded certificate. Verify the provided Certificate was provisioned correctly. .
An error occurred during encode or decode operation. (Error: 80092002; Source: Windows)
interestingly enough the usb distribution is completing successfully:
attached full log
I want to add what i have tried so far, to no avail:
1. according to this link:
https://learn.microsoft.com/en-us/answers/questions/784791/configmanager-unable-to-perform-osd-that-starts-fr
i added a command to change the registry:
reg.exe add HKLM\SOFTWARE\Policies\Microsoft\TPM /v OSManagedAuthLevel /t REG_DWORD /d 2 /f
before and after the apply operating system stage.
2. Rebuilt the task sequence with only basic commands
why is this failing?
Is there any more information that may help?
one interesting difference that i noticed is that the config client osd is trying to set a client certificate however the usb osd is creating successfully a media certificate.
on further investigation and working according to this blog:
https://www.prajwaldesai.com/enable-sccm-enhanced-http-configuration/
I found that enhanced http is configured on the server
, however even thought the certificate is found in the certlm.msc
, the manager is not importing the certificate to the IIS:
Referring to the difference between USB OSD and CLient Config OSD the certificates only show on the client after the USB OSD and not when using the client.
The server is 2016
I have tried to restart the server, remove and re-install the configuration, also to no avail.
smsts-m920.log
