locked
Error when deploying sccm 2012 sp1 client RRS feed

  • Question

  • Hi,

    I cannot deploy the sccm 2012 sp1 client, I have installed the hotfix that supposed to fix the certificate problem but I still get an error on the logs saying " ccmsetup has entered stop stage". Please advise.

    Regards,

    Pumie

    Monday, December 2, 2013 11:11 AM

All replies

  • Any Errors in ccmsetup.log and Client.msi.log files on the client?
    Monday, December 2, 2013 11:14 AM
  • The errors that I get are as follows:

    The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="13:07:57.593-120" date="12-02-2013" component="ccmsetup" context="" type="0" thread="8632" file="ccmcert.cpp:4109">
    <![LOG[There are no certificates in the 'MY' store.]LOG]!><time="13:07:57.593-120" date="12-02-2013" component="ccmsetup" context="" type="1" thread="8632" file="ccmcert.cpp:4131">
    <![LOG[GetSSLCertificateContext failed with error 0x87d00280]

    Monday, December 2, 2013 12:24 PM
  • "I have installed the hotfix that supposed to fix the certificate problem"

    What hotfix is that?

    Is this happening on multiple clients?

    Do you have HTTPS client communication enabled in your site?

    If yes, does this client have a proper PKI cert?

    How are you deploying the client to this client?


    Jason | http://blog.configmgrftw.com

    Monday, December 2, 2013 2:28 PM
  • The hotfix is this one on this link: hotfixv4.microsoft.com/ConfigMgrV5/sp1/ConfigMgr_2012_SP1_CU0_KB2801987_ENU/05.00.7804.1108/free/457899_ENU_x64_zip.

    Yes this is happening on multiple clients

    I do have HTTPS client communication enabled

    I am not sure about the PKI cert

    I am deploying using GPO, manual and console

    Monday, December 2, 2013 3:21 PM
  • There's no reason to deploy 2801987 if you used current SP1 media (it was updated to include that fix as of Jan 20, 2013).

    Have you deployed unique client auth certs to each client? This is required for HTTPS client communication.


    Jason | http://blog.configmgrftw.com

    Tuesday, December 3, 2013 2:25 AM