SCCM Clients not registering

[langermi]

Hi,

i have an issue where clients do not register on the SCCM Server.

right away in the installlogs of ccmlient i get the message - the client should selfsign a certificate
 

Failed in GetCertificate(...): 0x87d00281 ClientIDManagerStartup    16.06.2017 11:27:22    2152 (0x0868)
 

after finishing installation i get 

[RegTask] - Client registration is pending. Sending confirmation request for GUID:800EDA26-EB75-4705-A07D-A508EFD40AEB ...    ClientIDManagerStartup    16.06.2017 12:19:40    3996 (0x0F9C)

the corresponding log files (MP_Registration.log) on the server show

Processing Registration request from Client 'GUID:800EDA26-EB75-4705-A07D-A508EFD40AEB'    MP_RegistrationManager    16.06.2017 10:55:08    5836 (0x16CC)
Begin validation of Certificate [Thumbprint 306C84D474B71BBE06B439B694BF9F30E055B930] issued to 'SMS'    MP_RegistrationManager    16.06.2017 10:55:08    5836 (0x16CC)
Completed validation of Certificate [Thumbprint 306C84D474B71BBE06B439B694BF9F30E055B930] issued to 'SMS'    MP_RegistrationManager    16.06.2017 10:55:08    5836 (0x16CC)
MP Reg: DDR written to [C:\Program Files\Microsoft Configuration Manager\inboxes\auth\ddm.box\regreq\OVAZZA59.RDR] for Client [GUID:800EDA26-EB75-4705-A07D-A508EFD40AEB] with Subject [S-1-5-21-527882476-1223335848-3349973996-102144] Certificate Thumbprint [306C84D474B71BBE06B439B694BF9F30E055B930]    MP_RegistrationManager    16.06.2017 10:55:08    5836 (0x16CC)
MP Reg: Processing completed. Completion state = 0    MP_RegistrationManager    16.06.2017 10:55:08    5836 (0x16CC)
MP Reg: Did not find client(GUID:6D24FF4E-4F80-4ECB-86E4-5044D77CDBAE) public key. This may be because the client has not registered yet.    MP_RegistrationManager    16.06.2017 10:55:15    5836 (0x16CC)
MP Reg: Processing completed. Completion state = 0    MP_RegistrationManager    16.06.2017 10:55:15    5836 (0x16CC)
 

 

when i opened C:\Program Files\Microsoft Configuration Manager\inboxes\auth\ddm.box\regreq\ there was no file called OVAZZA59.RDR - the file was in an folder called BAD_DDRS.

 

what could be the cause that te RDR file was put into BAD_DDRS and why could the client not genereate a self signed certificate?

 

 

any help would be greatly appreciated

 

Thanks!