Remove From My Forums

1910 - Setting up MBAM issues

Question

Following the steps starting here: https://docs.microsoft.com/en-us/configmgr/protect/deploy-use/bitlocker/deploy-management-agent

And when I get to this portion of the instructions https://docs.microsoft.com/en-us/configmgr/protect/deploy-use/bitlocker/setup-websites#run-the-script

Using all of my actual values - the script runs, but I am getting the following error messages:

[SERVERNAME] Connecting to remote server SERVERNAME failed with the following error message : The WinRM client sent
a request to an HTTP server and got a response saying the requested HTTP URL was not available. This is usually
returned by a HTTP server that does not support the WS-Management protocol. For more information, see the
about_Remote_Troubleshooting Help topic.
    + CategoryInfo          : OpenError: (SERVERNAME1:String) [], PSRemotingTransportException
    + FullyQualifiedErrorId : URLNotAvailable,PSSessionStateBroken
Get-CertificateFromSqlServer : Unable to export ConfigMgr SQL Server Identification Certificate from SERVERNAME
At C:\Users\admin\Desktop\mbam install\mbamwebsiteinstaller.ps1:1171 char:16
+     $success = Get-CertificateFromSqlServer $SqlServerName
+                ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException
    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Get-CertificateFromSqlServer

Install-MBAMWebSites : Failure acquring SQL identity certificate.
At C:\Users\admin\Desktop\mbam install\mbamwebsiteinstaller.ps1:1324 char:5
+     Install-MBAMWebSites -SqlServerName $SqlServerName -SqlInstanceNa ...
+     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException
    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Install-MBAMWebSites

I'm on the server itself while running this .\MBAMWebSiteInstaller.ps1 -SqlServerName <ServerName> -SqlInstanceName <InstanceName> -SqlDatabaseName <DatabaseName> -ReportWebServiceUrl <ReportWebServiceUrl> -HelpdeskUsersGroupName <DomainUserGroup> -HelpdeskAdminsGroupName <DomainUserGroup> -MbamReportUsersGroupName <DomainUserGroup> -SiteInstall Both

Which it looks like the first part of the error is because it's trying to connect remote to the same server?

Any help is appreciated.

Friday, December 6, 2019 9:05 PM

Answers

0

Sign in to vote
I was able to get the installation to be successful by using the following steps:

First, verify that there is a http listener pointing to the IP address of the server that hosts the SQL server instance. When I ran the following command, my output was blank.

netsh http show iplisten
IP addresses present in the IP listen list:
-------------------------------------------

So, I manually added the IP address of the server:

netsh http add iplisten ipaddress=x.x.x.x

Once this completed, I ran the script again, and it installed successfully.
- Marked as answer by xerxes2985 Tuesday, December 10, 2019 7:09 PM
Tuesday, December 10, 2019 7:09 PM

All replies

0

Sign in to vote

Hi,

It seems is an issue related to Powershell, it's powershell WinRM remote connection error, it could be caused by having IPv6 enabled on the server.
Please try to disable IPv6 and to see if the error go away. There’s also a workaround using the hosts file if you don’t want to disable IPv6.

For more details(Please Note: Since the website is not hosted by Microsoft, just for your reference.):
https://rcmtech.wordpress.com/2016/10/21/fix-powershell-winrm-remote-connection-errors/

Regards,
Allen
Please remember to mark the replies as answers if they help.

If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

Monday, December 9, 2019 9:19 AM
0

Sign in to vote

Tested, and unfortunately the result is the same.

I'm running this PowerShell script directly on my CM server, that is also hosting and running the SQL instance. From the way this script looks (editing the file), it appears that it was written with the design that the SQL instance is hosted on a different server.

What you see (and what I thought) is that it's attempting to make a remote connection. However, it's trying to make a remote connection to the system it's already running on.

Any additional ideas?

Thanks

Jesse

Monday, December 9, 2019 2:07 PM
0

Sign in to vote
I was able to get the installation to be successful by using the following steps:

First, verify that there is a http listener pointing to the IP address of the server that hosts the SQL server instance. When I ran the following command, my output was blank.

netsh http show iplisten
IP addresses present in the IP listen list:
-------------------------------------------

So, I manually added the IP address of the server:

netsh http add iplisten ipaddress=x.x.x.x

Once this completed, I ran the script again, and it installed successfully.
- Marked as answer by xerxes2985 Tuesday, December 10, 2019 7:09 PM
Tuesday, December 10, 2019 7:09 PM
0

Sign in to vote

Hi,

Thank you very much for the update and sharing the solution here. I'm believe this should be useful for someone who has similar issue in the future. Here's a short summary for the problem.

Problem/Symptom:
===================
Set up MBAM follow documentation, get error when run powershell script:
.\MBAMWebSiteInstaller.ps1 -SqlServerName <ServerName> -SqlInstanceName <InstanceName> -SqlDatabaseName <DatabaseName> -ReportWebServiceUrl <ReportWebServiceUrl> -HelpdeskUsersGroupName <DomainUserGroup> -HelpdeskAdminsGroupName <DomainUserGroup> -MbamReportUsersGroupName <DomainUserGroup> -SiteInstall Both

Error message:
The WinRM client sent
a request to an HTTP server and got a response saying the requested HTTP URL was not available. This is usually
returned by a HTTP server that does not support the WS-Management protocol.

Possible Cause:
===================
No IP addresses present in the IP listen list.

Solution:
===================
Run the command to add IP address of the server that hosts the SQL server instance manually.
After running the command, the script can run successfully.

Regards,
Allen
Please remember to mark the replies as answers if they help.

If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

Wednesday, December 11, 2019 8:26 AM
0

Sign in to vote
I am getting similar error but slightly different.

[srsdc107473w201.next.loc] Connecting to remote server srsdc107473w201.next.loc failed with the following error message : The client cannot connect to the destination
specified in the request. Verify that the service on the destination is running and is accepting requests. Consult the logs and documentation for the WS-Management
service running on the destination, most commonly IIS or WinRM. If the destination is the WinRM service, run the following command on the destination to analyze and
configure the WinRM service: "winrm quickconfig". For more information, see the about_Remote_Troubleshooting Help topic.
+ CategoryInfo : OpenError: (srsdc107473w201.next.loc:String) [], PSRemotingTransportException
+ FullyQualifiedErrorId : CannotConnect,PSSessionStateBroken
Get-CertificateFromSqlServer : Unable to export ConfigMgr SQL Server Identification Certificate from srsdc107473w201.next.loc
At C:\Users\A_403462\Desktop\MBAM\MBAMWebSiteInstaller.ps1:1171 char:16
+ $success = Get-CertificateFromSqlServer $SqlServerName
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
+ FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Get-CertificateFromSqlServer

Install-MBAMWebSites : Failure acquring SQL identity certificate.
At C:\Users\A_403462\Desktop\MBAM\MBAMWebSiteInstaller.ps1:1324 char:5
+ Install-MBAMWebSites -SqlServerName $SqlServerName -SqlInstanceNa ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
+ FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Install-MBAMWebSites

Uninstalling MBAM web site registry

SQL and Site Server are on same server and i am trying to install it on same server.

Any help please ?

SomY
- Edited by CallMeSomY Friday, December 27, 2019 12:50 PM
Friday, December 27, 2019 12:49 PM
0

Sign in to vote

It didn't work :-(

srsdc107473w201.next.loc] Connecting to remote server srsdc107473w201.next.loc failed with the following error message : The client cannot connect to the destination
pecified in the request. Verify that the service on the destination is running and is accepting requests. Consult the logs and documentation for the WS-Management
ervice running on the destination, most commonly IIS or WinRM. If the destination is the WinRM service, run the following command on the destination to analyze and
onfigure the WinRM service: "winrm quickconfig". For more information, see the about_Remote_Troubleshooting Help topic.
+ CategoryInfo : OpenError: (srsdc107473w201.next.loc:String) [], PSRemotingTransportException
+ FullyQualifiedErrorId : CannotConnect,PSSessionStateBroken
et-CertificateFromSqlServer : Unable to export ConfigMgr SQL Server Identification Certificate from srsdc107473w201.next.loc
t C:\Users\A_403462\Desktop\MBAM\MBAMWebSiteInstaller.ps1:1171 char:16
$success = Get-CertificateFromSqlServer $SqlServerName
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
+ FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Get-CertificateFromSqlServer

nstall-MBAMWebSites : Failure acquring SQL identity certificate.
t C:\Users\A_403462\Desktop\MBAM\MBAMWebSiteInstaller.ps1:1324 char:5
Install-MBAMWebSites -SqlServerName $SqlServerName -SqlInstanceNa ...
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
+ FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Install-MBAMWebSites
SomY

Friday, December 27, 2019 12:52 PM

I was struggeling with the same problem. After searching the Web for a solution i tried all the above without success.

Finally i stumbled across this blog post on claudioessillva.eu

2017/09/04/http-403-error-powershell-remoting-different-domains-and-proxies

Check out the "Proxy Access Type" section. That's what finally did the trick. So i ended up with editing the installer script by adding the session option ProxyAccessType.

function Get-CertificateFromSqlServer
{
    param(
        [Parameter(Mandatory=$true)]
        [string]$sqlServer
    )

    $option = New-PSSessionOption -ProxyAccessType NoProxyServer ### added fix for WinRm error

    [array]$encodedCerts = Invoke-Command -ComputerName $sqlServer -ScriptBlock { 
        Get-ChildItem -Path Cert:\LocalMachine\My | Where-Object { ($_.FriendlyName -eq "ConfigMgr SQL Server Identification Certificate") -and ($_.NotBefore -lt (Get-Date)) -and ($_.NotAfter -gt (Get-Date)) } | ForEach-Object {
            $bytes = $_.Export("cert"); 
            [Convert]::ToBase64String($bytes) 
        }
    } -SessionOption $option ### added fix for WinRm error

Saturday, April 11, 2020 12:59 PM

Products

Resources

Solutions

Updates

Trials

Related Sites

Training

Certifications

Other resources

Support options

More support

Not an IT pro?

Answered by:

1910 - Setting up MBAM issues

Question

Answers

All replies