none
Imaged Windows 8.1 computers do not have a functional ConfigMgr Client- Certificates are not being installed

    Question

  • Using ConfigMgr 2012 R2 (no CU). OSD was working fine prior to the recent black tuesday patch problems. Domain Contoller (and also CA) as well as all clients got all the recent August patches. Just built 2 machines, one physical (inspiron 15, other hyper V) Both imaged computers went fine, OS added all security patches, and left me at ctrl alt delete. Logging on i noticed that software never got deployed, configmgr client was single tiered. ran ccmrepair, no affect, group policy repair, wmi reset, etc. Client never fully installed. SCEP patches for DEFs worked but that was through WSUS. uninstalled client completely, cleaned smscfg.ini, regedit to remove entries for install and then re ran \\server\share\ccmsetup /usepkicert SMSSITECODE=XXX

    same problem

    opened MMC computer account logged in as local admin, and there are NO certs under personal

    

    this is what i should have below(based on an old image that worked) There are some errors on the Domain Controller, CA (same one box) 

    Certificate enrollment for Local system is successfully authenticated by policy server ldap: using authentication mechanism windows integrated (Credential: credential is private). Policy Id: {6AF312CA-551D-477C-8931-C2217574F832}

    Certificate enrollment for Local system successfully load policy from policy server 

    Certificate enrollment for Local system for the template DomainController was not performed because this template has been superseded.

    The "Microsoft Platform Crypto Provider" provider was not loaded because initialization failed.

    Certificate enrollment for Local system could not enroll for a Machine certificate.  Read or enrollment access is not allowed for this template.

    Certificate enrollment for Local system could not enroll for a MachineEnrollmentAgent certificate.  Read or enrollment access is not allowed for this template.

    Certificate enrollment for Local system could not enroll for a IPSECIntermediateOnline certificate.  A valid certification authority cannot be found to issue this template.

    Certificate enrollment for ANER\Administrator is successfully authenticated by policy server ldap: using authentication mechanism windows integrated (Credential: credential is private). Policy Id: {6AF312CA-551D-477C-8931-C2217574F832}

    these repeat over and over periodically. 

    Certificate enrollment for ANER\Administrator successfully load policy from policy server 

    Not sure what could have happened here. The errors appear to go back until several months so i dont know if they are the cause of this. I know group policy is responsible for getting the certs installed. I have configured autoenrollment in the user and computer areas of GP for both default policy and domain controller policy.

    I am deeply perplexed. Any assistance greatly appreciated. 

    Friday, August 29, 2014 12:23 AM

All replies

  • So, are you using HTTPS client communication for all managed clients?

    Jason | http://blog.configmgrftw.com | @jasonsandys

    Friday, August 29, 2014 1:06 AM
  • Jason, that is correct
    Friday, August 29, 2014 1:10 AM
  • Have you reviewed smsts.log to see where the failure(s) are in the TS.

    Jason | http://blog.configmgrftw.com | @jasonsandys

    Friday, August 29, 2014 1:15 PM
  • SMSTS log on the client without certs: (did you want one on the configmgr box?)

    <![LOG[Successfully finalized logs to SMS client log directory from C:\WINDOWS\CCM\Logs]LOG]!><time="22:43:38.652+240" date="08-27-2014" component="OSDSetupHook" context="" type="1" thread="1088" file="tslogging.cpp:1542">

     older one is:

    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{BD8504DF-10E1-47C9-A665-50465C05B865}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{4E0944BD-6A6C-48A7-A1D2-A44A5823CC82}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{1F1BF36C-1820-4E5C-823E-34B2E487B999}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{709E184A-A599-469E-A762-CDD8D0044767}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{CFD388C6-CD22-42CC-952B-5483FAB6167E}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{E6E6BF22-C95E-4E02-9DFF-5FF8F75FE49D}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{2125003B-3160-45CF-8AC2-68338C4ED5E3}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{E4C65A44-063E-4827-B2FD-A3518F25412A}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{FC16DBD9-DD66-4D33-AC8D-E43D7E450AEE}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{CB649F95-764C-4491-B4E2-7C068A9B8F3E}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{ED903082-D523-4FE0-BB7C-28561D2ACC5B}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{4861265B-07DE-44A8-8E8C-D6BDBD684C5A}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{52E66067-0AD4-4891-BD3C-732643F73620}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{AF4A5641-682B-4FB0-B9CF-3B4B1DF2CA05}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{159E0E6B-ED60-4590-B557-2BAB3DBFA104}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{2A739F20-7F05-49D6-81D3-0A8E1037CFE3}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{E33411BF-F0A2-4EEA-8005-45C0EE368BC2}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{192CE59E-6FC9-4040-8F05-635F8E9590C3}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{A7647304-7727-4520-A23F-348EF65875D4}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{948AD2DF-7F0E-4A77-A5FE-08C65D0EE773}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{39252788-DB6A-4174-844A-67DE576CD949}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{3A84557B-3A3D-42F7-B237-6907CE532806}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{4D9D6559-49FA-4915-BF26-EDB2578A1824}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{95388B41-5F4C-4A95-9CE6-434936222B9A}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{2641E7BE-0735-42A6-B907-1ABC47ECBA37}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{BED5199D-D876-440F-883D-CE401F48C3A5}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{B11D84B9-F4DB-45A8-9062-6070F22DE215}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{3BCD2242-E9C5-4390-BC57-F80146F6E705}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{2FC619AC-AE77-4BB6-ABCF-EAE96CA2DE6B}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{D4A05D7E-E3F4-430A-A25D-B842FA642536}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{F1076D6A-BD02-4129-87AC-AF501567E234}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{A903BC88-4107-4EB5-93ED-409D403042C9}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{60AF64AC-93CC-42E7-BDB5-B35DD3C6F8F9}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{3AAECA7C-F5C9-4554-AED8-AA2167847F3C}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/RequiredApplication_bfee10b7-e1f5-4b6a-b109-0b83206accd4/VI/VS",PolicyInstanceID="{44A0199C-7CAD-40D7-AD13-B63FBE9320DE}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/RequiredApplication_bfee10b7-e1f5-4b6a-b109-0b83206accd4/VI/VS}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{C44E24BB-B4BF-4AAE-9132-1F7B04130190}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{AE60CBAC-E351-4AE5-B1B5-B03B868C7184}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{E1221271-5D5A-4D91-8F5E-99D1D82C6276}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{A28A290A-5F48-4000-BA74-1A406DEB396E}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI",PolicyInstanceID="{0D00F671-7FFA-4793-B0EC-DCAAC083A9C8}",PolicyRuleID="{Rule_ScopeId_122C12A8-8BB6-4207-99F0-FE10D9094C9D/AuthList_991E71F0-2232-4F83-AE72-F1813BE613DF/VI}",PolicySource="CcmTaskSequence",PolicyVersion=""'. TSManager 8/27/2014 10:43:14 PM 2140 (0x085C)
    TS deleting 'CCM_CIVersionInfo.PolicyID="ScopeId_122C12A8-8BB6-4207-99F0-FE

    There doesnt seem to be a smoking gun since the image is completely built and works except its missing certs and the sccm client is broken

    Friday, August 29, 2014 2:17 PM
  • smsts.log is a client side log file. What you've posted though is only the last bit of the log (it rolls every 1 or 2 MB -- don't remember which off-hand). Thus you need to find the old smsts.log (it has a date appended on it) and examine it.

    All OSD troubleshooting begins (and usually ends) with smsts.log. For more info on this, just search the web.


    Jason | http://blog.configmgrftw.com | @jasonsandys

    Friday, August 29, 2014 2:24 PM
  • Jason, i have posted the current and the old smsts.log file above.

    the top post is current, and after that is smsts-20140827-224338

    Friday, August 29, 2014 3:50 PM
  • there does not seem to be a way to attach log or txt files to these posts
    Friday, August 29, 2014 3:51 PM
  • Neither of those is complete though. You'll need to find the log with the relevant section showing where the TS has issues. This may take sitting in front the a system being deployed ad watching the TS while also watching the log. You should probably increase the size of the smsts.log also to prevent anything relevant from being missed.

    Jason | http://blog.configmgrftw.com | @jasonsandys

    Friday, August 29, 2014 3:53 PM
  • maybe i missed this?

    thread="2140" file="policyutil.cpp:8244">

    <![LOG[[142] Deleted setting 'CCM_CIVersionInfo.ModelName="Site_122C12A8-8BB6-4207-99F0-FE10D9094C9D/SUM_0465b24d-25a0-400b-bf74-d3e0100d8f22",Version="201"'.]LOG]!><time="22:43:27.886+240" date="08-27-2014" component="TSManager" context="" type="0" thread="2140" file="policyutil.cpp:8244">
    <![LOG[[143] Deleted setting 'CCM_CIVersionInfo.ModelName="Site_122C12A8-8BB6-4207-99F0-FE10D9094C9D/SUM_1bfd1d48-a9e1-4f96-87cf-638bec026368",Version="200"'.]LOG]!><time="22:43:27.886+240" date="08-27-2014" component="TSManager" context="" type="0" thread="2140" file="policyutil.cpp:8244">
    <![LOG[[144] Deleted setting 'CCM_CIVersionInfo.ModelName="Site_122C12A8-8BB6-4207-99F0-FE10D9094C9D/SUM_a65677e5-c213-4456-b889-1423d3d9dfe4",Version="200"'.]LOG]!><time="22:43:27.886+240" date="08-27-2014" component="TSManager" context="" type="0" thread="2140" file="policyutil.cpp:8244">
    <![LOG[[145] Deleted setting 'CCM_CIVersionInfo.ModelName="Site_122C12A8-8BB6-4207-99F0-FE10D9094C9D/SUM_03e25b94-07de-4233-be25-467fdbeb6ab8",Version="200"'.]LOG]!><time="22:43:27.886+240" date="08-27-2014" component="TSManager" context="" type="0" thread="2140" file="policyutil.cpp:8244">
    <![LOG[[146] Deleted setting 'CCM_CIVersionInfo.ModelName="Site_122C12A8-8BB6-4207-99F0-FE10D9094C9D/SUM_db4efc9a-846c-4671-8992-a5f135db42f5",Version="200"'.]LOG]!><time="22:43:27.886+240" date="08-27-2014" component="TSManager" context="" type="0" thread="2140" file="policyutil.cpp:8244">
    <![LOG[New/Changed ActualConfig policy instance(s) : 0]LOG]!><time="22:43:27.917+240" date="08-27-2014" component="TSManager" context="" type="0" thread="2140" file="policyutil.cpp:8278">
    <![LOG[Unlocked ActualConfig successfully]LOG]!><time="22:43:27.949+240" date="08-27-2014" component="TSManager" context="" type="0" thread="2140" file="policyutil.cpp:8333">
    <![LOG[Unlocked policy transaction lock successfully]LOG]!><time="22:43:27.949+240" date="08-27-2014" component="TSManager" context="" type="0" thread="2140" file="policyutil.cpp:8339">
    <![LOG[Raising event:

    instance of CCM_PolicyAgent_SettingsEvaluationComplete
    {
    ClientID = "GUID:5f0f3fab-7b5e-4dd5-ad0c-577dc0390200";
    DateTime = "20140828024328.199000+000";
    PolicyNamespace = "\\\\.\\root\\ccm\\policy\\machine\\actualconfig";
    ProcessID = 2136;
    ThreadID = 2140;
    };
    ]LOG]!><time="22:43:28.199+240" date="08-27-2014" component="TSManager" context="" type="1" thread="2140" file="event.cpp:715">
    <![LOG[Successfully submitted event to the Status Agent.]LOG]!><time="22:43:28.277+240" date="08-27-2014" component="TSManager" context="" type="0" thread="2140" file="event.cpp:733">
    <![LOG[End TS policy evaluation]LOG]!><time="22:43:28.683+240" date="08-27-2014" component="TSManager" context="" type="1" thread="2140" file="policyutil.cpp:10969">
    <![LOG[Policy evaluation initiated]LOG]!><time="22:43:28.855+240" date="08-27-2014" component="TSManager" context="" type="1" thread="2140" file="utils.cpp:4253">
    <![LOG[Sending success status message]LOG]!><time="22:43:28.996+240" date="08-27-2014" component="TSManager" context="" type="1" thread="2140" file="tsmanager.cpp:784">
    <![LOG[MP server https://ConfigMgr2012R2.andover.com. Ports 80,443. CRL=false.]LOG]!><time="22:43:29.011+240" date="08-27-2014" component="TSManager" context="" type="1" thread="2140" file="utils.cpp:5881">
    <![LOG[Setting authenticator]LOG]!><time="22:43:29.027+240" date="08-27-2014" component="TSManager" context="" type="1" thread="2140" file="utils.cpp:5903">
    <![LOG[Set authenticator in transport]LOG]!><time="22:43:29.027+240" date="08-27-2014" component="TSManager" context="" type="0" thread="2140" file="libsmsmessaging.cpp:7734">
    <![LOG[Sending StatusMessage]LOG]!><time="22:43:29.386+240" date="08-27-2014" component="TSManager" context="" type="1" thread="2140" file="libsmsmessaging.cpp:4023">
    <![LOG[Setting message signatures.]LOG]!><time="22:43:29.433+240" date="08-27-2014" component="TSManager" context="" type="0" thread="2140" file="libsmsmessaging.cpp:1295">
    <![LOG[Setting the authenticator.]LOG]!><time="22:43:29.699+240" date="08-27-2014" component="TSManager" context="" type="0" thread="2140" file="libsmsmessaging.cpp:1325">
    <![LOG[CLibSMSMessageWinHttpTransport::Send: URL: ConfigMgr2012R2.andover.com:443  CCM_POST /ccm_system_AltAuth/request]LOG]!><time="22:43:29.949+240" date="08-27-2014" component="TSManager" context="" type="1" thread="2140" file="libsmsmessaging.cpp:8604">
    <![LOG[In SSL, but with no client cert]LOG]!><time="22:43:30.168+240" date="08-27-2014" component="TSManager" context="" type="1" thread="2140" file="libsmsmessaging.cpp:8738">
    <![LOG[Request was successful.]LOG]!><time="22:43:30.640+240" date="08-27-2014" component="TSManager" context="" type="0" thread="2140" file="libsmsmessaging.cpp:8939">
    <![LOG[End program: powershell.exe c:\windows\temp\inventory.ps1]LOG]!><time="22:43:31.027+240" date="08-27-2014" component="TSManager" context="" type="1" thread="2140" file="tsmanager.cpp:805">
    <![LOG[Finalize logging request ignored from process 2136]LOG]!><time="22:43:31.027+240" date="08-27-2014" component="TSManager" context="" type="1" thread="2140" file="tslogging.cpp:1737">
    <![LOG[Waiting for CcmExec service to be fully operational]LOG]!><time="22:43:31.027+240" date="08-27-2014" component="TSManager" context="" type="1" thread="2140" file="utils.cpp:4888">
    <![LOG[CcmExec service is up and fully operational]LOG]!><time="22:43:31.027+240" date="08-27-2014" component="TSManager" context="" type="1" thread="2140" file="utils.cpp:4893">
    <![LOG[Access handle will be read from _SMSTSActiveRequestHandle]LOG]!><time="22:43:31.027+240" date="08-27-2014" component="TSManager" context="" type="1" thread="2140" file="tsmanagerutils.cpp:100">
    <![LOG[Access handle: {158884B6-4223-40FA-AD20-01D4E30DC803}]LOG]!><time="22:43:31.027+240" date="08-27-2014" component="TSManager" context="" type="1" thread="2140" file="tsmanagerutils.cpp:111">
    <![LOG[Attempting to release request using {158884B6-4223-40FA-AD20-01D4E30DC803}]LOG]!><time="22:43:31.027+240" date="08-27-2014" component="TSManager" context="" type="1" thread="2140" file="tsmanagerutils.cpp:119">
    <![LOG[CoCreateInstance succeeded]LOG]!><time="22:43:31.043+240" date="08-27-2014" component="TSManager" context="" type="1" thread="2140" file="tsmanagerutils.cpp:133">
    <![LOG[pISoftwareExecutionRequestMgr->ReleaseRequest(ActiveRequestGUID), HRESULT=80004005 (e:\nts_sccm_release\sms\client\tasksequence\tsmanager\tsmanagerutils.cpp,136)]LOG]!><time="22:43:31.090+240" date="08-27-2014" component="TSManager" context="" type="0" thread="2140" file="tsmanagerutils.cpp:136">
    <![LOG[ReleaseRequest failed with error code 0x80004005]LOG]!><time="22:43:31.090+240" date="08-27-2014" component="TSManager" context="" type="3" thread="2140" file="tsmanagerutils.cpp:136">
    <![LOG[Task Sequence Manager could not release active TS request. code 80004005]LOG]!><time="22:43:31.090+240" date="08-27-2014" component="TSManager" context="" type="2" thread="2140" file="tsmanagerutils.cpp:166">
    <![LOG[Process completed with exit code 0]LOG]!><time="22:43:31.183+240" date="08-27-2014" component="TSMBootstrap" context="" type="1" thread="2020" file="commandline.cpp:1123">
    <![LOG[Exiting with return code 0x00000000]LOG]!><time="22:43:31.183+240" date="08-27-2014" component="TSMBootstrap" context="" type="1" thread="2020" file="tsmbootstrap.cpp:1238">
    <![LOG[Process completed with exit code 0]LOG]!><time="22:43:31.199+240" date="08-27-2014" component="OSDSetupHook" context="" type="1" thread="1088" file="commandline.cpp:1123">
    <![LOG[Task sequence completed 0x00000000]LOG]!><time="22:43:31.199+240" date="08-27-2014" component="OSDSetupHook" context="" type="1" thread="1088" file="basesetuphook.cpp:1585">
    <![LOG[Resume SCCM Client.]LOG]!><time="22:43:31.199+240" date="08-27-2014" component="OSDSetupHook" context="" type="1" thread="1088" file="basesetuphook.cpp:1264">
    <![LOG[Uninstalling Setup Hook]LOG]!><time="22:43:38.590+240" date="08-27-2014" component="OSDSetupHook" context="" type="1" thread="1088" file="basesetuphook.cpp:1628">
    <![LOG[Removing setup hook from registry.]LOG]!><time="22:43:38.590+240" date="08-27-2014" component="OSDSetupHook" context="" type="0" thread="1088" file="vistasetuphook.cpp:143">
    <![LOG[Successfully removed C:\WINDOWS\system32\OSDGINA.DLL]LOG]!><time="22:43:38.590+240" date="08-27-2014" component="OSDSetupHook" context="" type="1" thread="1088" file="basesetuphook.cpp:1321">
    <![LOG[Successfully removed C:\WINDOWS\system32\OSDSETUPHOOK.EXE]LOG]!><time="22:43:38.622+240" date="08-27-2014" component="OSDSetupHook" context="" type="1" thread="1088" file="basesetuphook.cpp:1321">
    <![LOG[Successfully removed C:\WINDOWS\system32\_SMSOSDSetup]LOG]!><time="22:43:38.622+240" date="08-27-2014" component="OSDSetupHook" context="" type="1" thread="1088" file="basesetuphook.cpp:1358">
    <![LOG[End program: powershell.exe c:\windows\temp\inventory.ps1]LOG]!><time="22:43:38.622+240" date="08-27-2014" component="OSDSetupHook" context="" type="1" thread="1088" file="basesetuphook.cpp:1642">

    Friday, August 29, 2014 3:57 PM
  • starting fresh again. wish there was a way to just attach the log files to these posts without expanding them into 300 lines.

    I appreciate your assistance

    Friday, August 29, 2014 6:32 PM
  • It turns out that after i removed EMET 5.o from the Domain Controller (CA) and the machine i was using for Hyper V to image a client, the certificates came back just fine. might want to file this away for future reference.

    thanks

    Saturday, August 30, 2014 12:18 AM
  • It turns out that after i removed EMET 5.o from the Domain Controller (CA) and the machine i was using for Hyper V to image a client, the certificates came back just fine. might want to file this away for future reference.

    EMET on a DC/CA and also on a Hyper-V host ?!?!?!

    eeeek!


    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

    Sunday, August 31, 2014 1:02 AM
  • Home lab...i also run Hyper V for SCOM 2012 Sp1, Exchange 2013, Lync 2013, etc. 

    I play with everything that i can. Wish i can afford more physical hardware...

    :-(

    still having a bit of an issue, so I am loading another image. More to come.

    Sunday, August 31, 2014 1:22 AM