Jump to content


jcortez103

Client installation fails with SSL

Recommended Posts

Hi,

I'm setting up a new environment and am using certificates from our CA. Before using the certs, client installation worked with no problem. Now that I have added certs, ccmsetup fails. below is my log. Any ideas?

 

 

==========[ ccmsetup started in process 4208 ]========== ccmsetup 12/3/2014 11:08:05 AM 2608 (0x0A30)
Running on platform X64 ccmsetup 12/3/2014 11:08:05 AM 2608 (0x0A30)
Updated security on object C:\WINDOWS\ccmsetup\cache\. ccmsetup 12/3/2014 11:08:05 AM 2608 (0x0A30)
Launch from folder \\server\SMS_EGI\Client\ ccmsetup 12/3/2014 11:08:05 AM 2608 (0x0A30)
CcmSetup version: 5.0.7958.1000 ccmsetup 12/3/2014 11:08:05 AM 2608 (0x0A30)
Running on 'Microsoft Windows 7 Enterprise ' (6.1.7601). Service Pack (1.0). SuiteMask = 272. Product Type = 18 ccmsetup 12/3/2014 11:08:05 AM 2608 (0x0A30)
Ccmsetup command line: \\server\SMS_EGI\Client\CCMSetup.exe /mp:server.domain.com SMSSITECODE=EGI ccmsetup 12/3/2014 11:08:05 AM 2608 (0x0A30)
Command line parameters for ccmsetup have been specified. No registry lookup for command line parameters is required. ccmsetup 12/3/2014 11:08:05 AM 2608 (0x0A30)
Command line: \\server\SMS_EGI\Client\CCMSetup.exe /mp:server.domain.com SMSSITECODE=EGI ccmsetup 12/3/2014 11:08:05 AM 2608 (0x0A30)
SslState value: 224 ccmsetup 12/3/2014 11:08:05 AM 2608 (0x0A30)
No version of the client is currently detected. ccmsetup 12/3/2014 11:08:05 AM 2608 (0x0A30)
Updated security on object C:\WINDOWS\ccmsetup\. ccmsetup 12/3/2014 11:08:05 AM 2608 (0x0A30)
A Fallback Status Point has not been specified. Message with STATEID='100' will not be sent. ccmsetup 12/3/2014 11:08:05 AM 2608 (0x0A30)
ccmsetup service is stopped. ccmsetup 12/3/2014 11:08:05 AM 2608 (0x0A30)
Successfully deleted the ccmsetup service ccmsetup 12/3/2014 11:08:10 AM 2608 (0x0A30)
Successfully deleted existing ccmsetup.exe ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
Downloading file \\server\SMS_EGI\Client\ccmsetup.exe ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
Downloading \\server\SMS_EGI\Client\ccmsetup.exe to C:\WINDOWS\ccmsetup\ccmsetup.exe ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 3% complete (61440 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 7% complete (122880 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 11% complete (184320 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 15% complete (245760 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 19% complete (307200 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 22% complete (368640 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 26% complete (430080 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 30% complete (491520 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 34% complete (552960 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 38% complete (614400 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 41% complete (675840 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 45% complete (737280 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 49% complete (798720 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 53% complete (860160 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 57% complete (921600 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 60% complete (983040 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 64% complete (1044480 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 68% complete (1105920 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 72% complete (1167360 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 76% complete (1228800 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 79% complete (1290240 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 83% complete (1351680 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 87% complete (1413120 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 91% complete (1474560 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 95% complete (1536000 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 98% complete (1597440 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
File download 100% complete (1614520 of 1614520 bytes). ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
Download complete. ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
Successfully created the ccmsetup service ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
==========[ ccmsetup started in process 1236 ]========== ccmsetup 12/3/2014 11:08:11 AM 4136 (0x1028)
Running on platform X64 ccmsetup 12/3/2014 11:08:11 AM 4136 (0x1028)
Updated security on object C:\WINDOWS\ccmsetup\cache\. ccmsetup 12/3/2014 11:08:11 AM 4136 (0x1028)
Launch from folder C:\WINDOWS\ccmsetup\ ccmsetup 12/3/2014 11:08:11 AM 4136 (0x1028)
CcmSetup version: 5.0.7958.1000 ccmsetup 12/3/2014 11:08:11 AM 4136 (0x1028)
Successfully started the ccmsetup service ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
In ServiceMain ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
Deleted file C:\WINDOWS\ccmsetup\ccmsetup.exe.download ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
Task 'Configuration Manager Client Upgrade Task' does not exist ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
CcmSetup is exiting with return code 0 ccmsetup 12/3/2014 11:08:11 AM 2608 (0x0A30)
Running on 'Microsoft Windows 7 Enterprise ' (6.1.7601). Service Pack (1.0). SuiteMask = 272. Product Type = 18 ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
Ccmsetup command line: "C:\WINDOWS\ccmsetup\ccmsetup.exe" /runservice "/mp:server.domain.com" "SMSSITECODE=EGI" ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
Command line parameters for ccmsetup have been specified. No registry lookup for command line parameters is required. ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
Command line: "C:\WINDOWS\ccmsetup\ccmsetup.exe" /runservice "/mp:server.domain.com "SMSSITECODE=EGI" ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
SslState value: 224 ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
CCMHTTPPORT: 80 ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
CCMHTTPSPORT: 443 ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
CCMHTTPSSTATE: 224 ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
CCMHTTPSCERTNAME: ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
FSP: ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
CCMFIRSTCERT: 1 ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
Config file: ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
Retry time: 10 minute(s) ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
MSI log file: C:\WINDOWS\ccmsetup\Logs\client.msi.log ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
MSI properties: SMSSITECODE="EGI" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="224" CCMFIRSTCERT="1" ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
Source List: ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
MPs: ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
server.domain.com ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
No version of the client is currently detected. ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
Task 'Configuration Manager Client Retry Task' does not exist ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
Updated security on object C:\WINDOWS\ccmsetup\. ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
A Fallback Status Point has not been specified. Message with STATEID='100' will not be sent. ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
Running as user "SYSTEM" ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
Detected 17131 MB free disk space on system drive. ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
Checking Write Filter Status. ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
This is not a supported write filter device. We are not in a write filter maintenance mode. ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
Performing AD query: '(&(ObjectCategory=mSSMSManagementPoint)(mSSMSDefaultMP=TRUE)(mSSMSSiteCode=EGI))' ccmsetup 12/3/2014 11:08:11 AM 5048 (0x13B8)
OperationalXml '<ClientOperationalSettings><Version>5.00.7958.1000</Version><SecurityConfiguration><SecurityModeMask>0</SecurityModeMask><SecurityModeMaskEx>480</SecurityModeMaskEx><HTTPPort>80</HTTPPort><HTTPSPort>443</HTTPSPort><CertificateStoreName></CertificateStoreName><CertificateIssuers>CN=EGI-Root-CA</CertificateIssuers><CertificateSelectionCriteria></CertificateSelectionCriteria><CertificateSelectFirstFlag>1</CertificateSelectFirstFlag><SiteSigningCert>308202F5308201DDA003020102021011D87AD21C025AA447CEF741D700D766300D06092A864886F70D01010B05003016311430120603550403130B53697465205365727665723020170D3134313032333232353931335A180F32313134303933303232353931335A3016311430120603550403130B536974652053657276657230820122300D06092A864886F70D01010105000382010F003082010A0282010100C7A34EACA6342BC0C61EC3656FD4FB46AD1B30DA309087686C41C1A4EF3E62ECFBC9A67FA3D6050F7C7255C0F6F42D2BB475313D7B4ACD5CE3F9D93F514F2F34871FD5449596283ECFDD092B954C82F250099BD861EDA7D50691D83628B410AED5BFD2172423307F2BF172C822721975B42CD5F3CC98480C1795C890BBA9C273FF27E8FBA4CC5820122B771254069EFF4775323459734264B6492224C165ED6FC3C48EF8F9D7023813E86EB114615E3F5098725DF5077CC0232E88D8CD0ADAD41BC894ECB0189D9DE699204CD17D618D9A146F57801B4A0619AFAA9EA0C33EDF21B6D0B5D92BB6E8B38C17903C504D4B5E269CED3AB44DBCF8BF0D70BAE2E5FD0203010001A33D303B30230603551D11041C301A8218414E412D5343434D30312E65636F6E6F6C6974652E636F6D30140603551D25040D300B06092B060104018237650B300D06092A864886F70D01010B05000382010100773578D64C7FA0C08C95159C4E1468B63E105372A8431CE927E128EA2BFA1329CAA240B22F8C9F76361736322E0133A63FFEAA4E20B67E75A967F4186C60D374AB46A5269A30987034BAB0898B53BC45D1E1D37FCE79077465525B9AB724C2B7BEE662F339674194C7E571C6B92677C6AE12C046EBA102C8AF026547DEAC873FBCBA2D08EE7DA73D0AC26151A8AD9F020787FFF8B4CC0AD985767FE43534D1AD689A0E6F33DF92ACC8A0C21B19DA66BFDDB109F6BE1C5F1D88D4BB486BE1058CD5012755BF37DBD62EFA757020EAF2FD2D80D786CA2E2E21539C3204728B00AAD6E9D1D907B5F4A3B4C9304A8A34102AD30023249773EB9ED140333FDD794A5C</SiteSigningCert></SecurityConfiguration><RootSiteCode>EGI</RootSiteCode><CCM> <CommandLine>SMSSITECODE=EGI</CommandLine> </CCM><FSP> <FSPServer>ANA-SCCM02.domain.com</FSPServer> </FSP><Capabilities SchemaVersion ="1.0"><Property Name="SSL" Version="1" /><Property Name="SSLState" Value="63" /></Capabilities><Domain Value="domain.com" /><Forest Value="domain.com" /></ClientOperationalSettings>' ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
Unable to open Registry key Software\Microsoft\CCM. Return Code [80070002]. Client HTTPS state is Unknown. ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
The MP name retrieved is 'server.domain.com' with version '7958' and capabilities '<Capabilities SchemaVersion="1.0"><Property Name="SSL" Version="1"/><Property Name="SSLState" Value="63"/></Capabilities>' ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
MP 'server.domain.com' is compatible ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
Retrieved 1 MP records from AD for site 'EGI' ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
Retrived site version '5.00.7958.1000' from AD for site 'EGI' ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
SiteCode: EGI ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
SiteVersion: 5.00.7958.1000 ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
Ccmsetup is being restarted due to an administrative action. Installation files will be reset and downloaded again. ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
Only one MP server.domain.com is specified. Use it. ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
Searching for DP locations from MP(s)... ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
Current AD site of machine is Anaheim LocationServices 12/3/2014 11:08:12 AM 5048 (0x13B8)
Local Machine is joined to an AD domain LocationServices 12/3/2014 11:08:12 AM 5048 (0x13B8)
Current AD forest name is domain.com, domain name is domain.com LocationServices 12/3/2014 11:08:12 AM 5048 (0x13B8)
DhcpGetOriginalSubnetMask entry point is supported. LocationServices 12/3/2014 11:08:12 AM 5048 (0x13B8)
Begin checking Alternate Network Configuration LocationServices 12/3/2014 11:08:12 AM 5048 (0x13B8)
Finished checking Alternate Network Configuration LocationServices 12/3/2014 11:08:12 AM 5048 (0x13B8)
Adapter {D2308DCF-6926-45EF-AC3E-94850BE9E176} is DHCP enabled. Checking quarantine status. LocationServices 12/3/2014 11:08:12 AM 5048 (0x13B8)
Sending message body '<ContentLocationRequest SchemaVersion="1.00">
<AssignedSite SiteCode="EGI"/>
<ClientPackage/>
<ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0" UseInternetDP="0">
<ADSite Name="Anaheim"/>
<Forest Name="domain.com"/>
<Domain Name="domain.com"/>
<IPAddresses>
<IPAddress SubnetAddress="10.1.8.0" Address="10.1.12.197"/>
</IPAddresses>
</ClientLocationInfo>
</ContentLocationRequest>
' ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
Sending message header '<Msg SchemaVersion="1.1"><ID>{63BAD5B4-2CB6-4600-8A1B-3F7B248AC711}</ID><SourceHost>VM-JCORTEZ</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:VM-JCORTEZ:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>server.domain.com</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2014-12-03T19:08:12Z</SentTime><Body Type="ByteRange" Offset="0" Length="1090"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>' ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
CCM_POST 'HTTP://server.domain.com/ccm_system/request' ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
Failed to receive ccm message response. Status code = 403 ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
GetDPLocations failed with error 0x80004005 ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
Failed to get DP locations as the expected version from MP 'server.domain.com'. Error 0x80004005 ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
A Fallback Status Point has not been specified. Message with STATEID='101' will not be sent. ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)
Next retry in 10 minute(s)... ccmsetup 12/3/2014 11:08:12 AM 5048 (0x13B8)

 

 

Share this post


Link to post
Share on other sites

Thanks, i do have my boundaries setup and the DP is assigned to the correct boundary group.

 

I ran the 3 tests and each return with

HTTP Error 403.7 - Forbidden The page you are attempting to access requires your browser to have a Secure Sockets Layer (SSL) client certificate that the Web server recognizes.

I'm using certs from my CA and the root cert is installed on both of my servers. I'm stumped!

Share this post


Link to post
Share on other sites

Hi

 

Try this

 

Select the site under administration > site configuration > sites

- Opened Hierarchy Settings (second button on top left corner)

- Enabled the "Use a fallback site" checkbox and selected my only site from the list

- Enabled the the two checkboxes in "Automatic Client Upgrade" tab to automatically upgrade clients and enable prestaged content for SCCM client package.

 

kind regard

Safet Grahic

http://www.learnmesccm.com/

https://www.linkedin...ahic/a0/842/b21

Share this post


Link to post
Share on other sites

Ugh!!!! Reinstalled and I'm still getting the problems. I even requested new certs from my CA. The MP testing now works but now I just get the error "Failed to get DP locations as the expected version from MP 'server.domain.com'. Error 0x87d00215". I'm going nuts here!

 

 

OperationalXml '<ClientOperationalSettings><Version>5.00.7958.1000</Version><SecurityConfiguration><SecurityModeMask>0</SecurityModeMask><SecurityModeMaskEx>480</SecurityModeMaskEx><HTTPPort>80</HTTPPort><HTTPSPort>443</HTTPSPort><CertificateStoreName></CertificateStoreName><CertificateIssuers>CN=EGI-Root-CA</CertificateIssuers><CertificateSelectionCriteria></CertificateSelectionCriteria><CertificateSelectFirstFlag>1</CertificateSelectFirstFlag><SiteSigningCert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iteSigningCert></SecurityConfiguration><RootSiteCode>EGI</RootSiteCode><CCM> <CommandLine>SMSSITECODE=EGI</CommandLine> </CCM><FSP> <FSPServer></FSPServer> </FSP><Capabilities SchemaVersion ="1.0"><Property Name="SSLState" Value="0" /></Capabilities><Domain Value="domain.com" /><Forest Value="domain.com" /></ClientOperationalSettings>' ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
Client is set to use HTTPS when available. The current state is 480. ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
The MP name retrieved is 'server.domain.com' with version '7958' and capabilities '<Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities>' ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
MP 'server.domain.com' is compatible ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
Retrieved 1 MP records from AD for site 'EGI' ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
Retrived site version '5.00.7958.1000' from AD for site 'EGI' ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
SiteCode: EGI ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
SiteVersion: 5.00.7958.1000 ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
Ccmsetup is being restarted due to an administrative action. Installation files will be reset and downloaded again. ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
Only one MP server.domain.com is specified. Use it. ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
Searching for DP locations from MP(s)... ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
Current AD site of machine is Anaheim LocationServices 12/9/2014 1:01:17 PM 1788 (0x06FC)
Local Machine is joined to an AD domain LocationServices 12/9/2014 1:01:17 PM 1788 (0x06FC)
Current AD forest name is domain.com, domain name is domain.com LocationServices 12/9/2014 1:01:17 PM 1788 (0x06FC)
DhcpGetOriginalSubnetMask entry point is supported. LocationServices 12/9/2014 1:01:17 PM 1788 (0x06FC)
Begin checking Alternate Network Configuration LocationServices 12/9/2014 1:01:17 PM 1788 (0x06FC)
Finished checking Alternate Network Configuration LocationServices 12/9/2014 1:01:17 PM 1788 (0x06FC)
Adapter {72727585-9047-4746-B7E0-11561189A6FA} is DHCP enabled. Checking quarantine status. LocationServices 12/9/2014 1:01:17 PM 1788 (0x06FC)
Sending message body '<ContentLocationRequest SchemaVersion="1.00">
<AssignedSite SiteCode="EGI"/>
<ClientPackage/>
<ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0" UseInternetDP="0">
<ADSite Name="Anaheim"/>
<Forest Name="domain.com"/>
<Domain Name="domain.com"/>
<IPAddresses>
<IPAddress SubnetAddress="10.1.8.0" Address="10.1.10.104"/>
</IPAddresses>
</ClientLocationInfo>
</ContentLocationRequest>
' ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
Sending message header '<Msg SchemaVersion="1.1"><ID>{C177D728-9A72-4E83-857C-A5B33C1EA67A}</ID><SourceHost>client</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:client:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>server.domain.com</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2014-12-09T21:01:17Z</SentTime><Body Type="ByteRange" Offset="0" Length="1090"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>' ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
CCM_POST 'HTTP://server.domain.com/ccm_system/request' ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
Content boundary is '--aAbBcCdDv1234567890VxXyYzZ' ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
Received header '<Msg SchemaVersion="1.1">
<ID>{62C80687-8356-48B3-8EDD-47A767E2B530}</ID>
<SourceID>GUID:6037A8FB-DE89-49B3-AF63-63770E02AD25</SourceID>
<SourceHost>server</SourceHost>
<TargetAddress>direct:client:LS_ReplyLocations</TargetAddress>
<ReplyTo>MP_LocationManager</ReplyTo>
<CorrelationID>{00000000-0000-0000-0000-000000000000}</CorrelationID>
<Priority>3</Priority>
<Timeout>600</Timeout>
<TargetHost>client</TargetHost><TargetEndpoint>LS_ReplyLocations</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2014-12-09T21:01:17Z</SentTime><Body Type="ByteRange" Offset="0" Length="2924"/><Hooks><Hook3 Name="zlib-compress"/><Hook Name="authenticate"><Property Name="Signature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roperty><Property Name="AuthSenderMachine">server;server.domain.com;</Property><Property Name="MPSiteCode">EGI</Property></Hook></Hooks><Payload Type="inline"/></Msg>' ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
Received reply body '<ContentLocationReply SchemaVersion="1.00"><ContentInfo PackageFlags="0"><ContentHashValues/></ContentInfo><Sites><Site><MPSite SiteCode="EGI" MasterSiteCode="EGI" SiteLocality="LOCAL" IISPreferedPort="80" IISSSLPreferedPort="443"/><LocationRecords><LocationRecord><URL Name="http://server.domain.com/SMS_DP_SMSPKG$/EGI00002"Signature="http://server.domain.com/SMS_DP_SMSSIG$/EGI00002"/><URL Name="http://server.domain.com/NOCERT_SMS_DP_SMSPKG$/EGI00002" Signature="http://server.domain.com/NOCERT_SMS_DP_SMSSIG$/EGI00002"/><ADSite Name=""/><IPSubnets><IPSubnet Address=""/><IPSubnet Address=""/></IPSubnets><Metric Value=""/><Version>7958</Version><Capabilities SchemaVersion="1.0"><Property Name="SSL" Version="1"/><Property Name="SSLState" Value="63"/></Capabilities><ServerRemoteName>server.domain.com</ServerRemoteName><DPType>SERVER</DPType><Windows Trust="1"/><Locality>LOCAL</Locality></LocationRecord></LocationRecords></Site><Site><MPSite SiteCode="EGI" MasterSiteCode="EGI" SiteLocality="LOCAL"/><LocationRecords/></Site></Sites><ClientPackage FullPackageID="EGI00002" FullPackageVersion="1" FullPackageHash="BFC11E099E8F451107B43E0DBEFD93B01DB2D6453DA74F8A2CB94B73D676C1CD" MinimumClientVersion="5.00.7958.1000" RandomizeMaxDays="7" ProgramEnabled="true" LastModifiedTime="30412992;696490368" SiteVersionMatch="true" SiteVersion="5.00.7958.1000" EnablePeerCache="true"/><RelatedContentIDs/></ContentLocationReply>' ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
Found local location 'https://server.domain.com/SMS_DP_SMSPKG$/EGI00002' ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
Found local location 'https://server.domain.com/NOCERT_SMS_DP_SMSPKG$/EGI00002' ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
SslState 224 indicates HTTP only. Ignore HTTPS location 'https://server.domain.com/SMS_DP_SMSPKG$/EGI00002' ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
SslState 224 indicates HTTP only. Ignore HTTPS location 'https://server.domain.com/NOCERT_SMS_DP_SMSPKG$/EGI00002' ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
Failed to get DP locations as the expected version from MP 'server.domain.com'. Error 0x87d00215 ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
A Fallback Status Point has not been specified. Message with STATEID='101' will not be sent. ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)
Next retry in 10 minute(s)... ccmsetup 12/9/2014 1:01:17 PM 1788 (0x06FC)

Share this post


Link to post
Share on other sites

Access to either:

 

https://SCCM_SERVER_FDDN/sms_mp/.sms_aut?mplist
https://SCCM_SERVER_FDDN/sms_mp/.sms_aut?mpcert

 

is ONLY allowed if correct certificate is installed in user's MY store for the user that accesses the very site

 

So if one does it as logged in user, it certificate my be in THIS USER MY store

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...


×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.