locked
SCCM 2012 Client Push Not Working RRS feed

  • Question

  • Hello,

    The issue I'm having seems to be with getting the client installed on our Windows 7 64bit PC environment.  Once the client push request is sent, the client PC shows the "ccmsetup.exe *32" process running when I open task manager and look at the processes running, however after it finishes nothing is installed.  From the SCCM server I can access the \\CLIENTPC\ADMIN$ share, so I’m sure permissions are fine.  I'm very new to getting this configured and I'm not sure why it would go this far but never actually install.  Any help in the right direction would be greatly appreciated. 

    Here is a copy of the ccmsetup.log from the client if it might help:

    <IPAddress SubnetAddress="172.XXX.XXX.0" Address="172.XXX.XXX.6"/>

        </IPAddresses>

      </ClientLocationInfo>

    </ContentLocationRequest>

    ']LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="0" thread="4584" file="siteinfo.cpp:96">

    <![LOG[Sending message header '<Msg SchemaVersion="1.1"><ID>{D3D8AA78-3B63-4E8E-92FD-43064FD1B1B3}</ID><SourceHost>CLIENTPC</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:CLIENTPC:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>HTTPS://SCCMServer01.mydomain.com</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2014-09-27T02:21:45Z</SentTime><Body Type="ByteRange" Offset="0" Length="1082"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>']LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="0" thread="4584" file="siteinfo.cpp:177">

    <![LOG[CCM_POST 'HTTPS://SCCMServer01.mydomain.com/ccm_system/request']LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="httphelper.cpp:807">

    <![LOG[Begin searching client certificates based on Certificate Issuers]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmcert.cpp:3833">

    <![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmcert.cpp:3992">

    <![LOG[Begin to select client certificate]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmcert.cpp:4073">

    <![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="0" thread="4584" file="ccmcert.cpp:4109">

    <![LOG[There are no certificates in the 'MY' store.]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmcert.cpp:4131">

    <![LOG[GetSSLCertificateContext failed with error 0x87d00280]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="3" thread="4584" file="ccmsetup.cpp:6025">

    <![LOG[GetHttpRequestObjects failed for verb: 'CCM_POST', url: 'HTTPS://SCCMServer01.mydomain.com/ccm_system/request']LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="3" thread="4584" file="httphelper.cpp:947">

    <![LOG[GetDPLocations failed with error 0x87d00280]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="3" thread="4584" file="siteinfo.cpp:532">

    <![LOG[Failed to get DP locations as the expected version from MP 'HTTPS://SCCMServer01.mydomain.com'. Error 0x87d00280]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="2" thread="4584" file="ccmsetup.cpp:10926">

    <![LOG[Failed to find DP locations from MP 'HTTPS://SCCMServer01.mydomain.com' with error 0x87d00280, status code 200. Check next MP.]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="2" thread="4584" file="ccmsetup.cpp:10782">

    <![LOG[Only one MP HTTPS://SCCMServer01.mydomain.com is specified. Use it.]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmsetup.cpp:9745">

    <![LOG[Have already tried all MPs. Couldn't find DP locations.]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="3" thread="4584" file="ccmsetup.cpp:10811">

    <![LOG[GET 'HTTPS://SCCMServer01.mydomain.com/CCM_Client/ccmsetup.cab']LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="httphelper.cpp:807">

    <![LOG[Begin searching client certificates based on Certificate Issuers]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmcert.cpp:3833">

    <![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmcert.cpp:3992">

    <![LOG[Begin to select client certificate]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmcert.cpp:4073">

    <![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="0" thread="4584" file="ccmcert.cpp:4109">

    <![LOG[There are no certificates in the 'MY' store.]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmcert.cpp:4131">

    <![LOG[GetSSLCertificateContext failed with error 0x87d00280]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="3" thread="4584" file="ccmsetup.cpp:6025">

    <![LOG[GetHttpRequestObjects failed for verb: 'GET', url: 'HTTPS://SCCMServer01.mydomain.com/CCM_Client/ccmsetup.cab']LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="3" thread="4584" file="httphelper.cpp:947">

    <![LOG[DownloadFileByWinHTTP failed with error 0x87d00280]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="3" thread="4584" file="httphelper.cpp:1081">

    <![LOG[CcmSetup failed with error code 0x87d00280]LOG]!><time="22:21:45.808+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="2552" file="ccmsetup.cpp:10544">

    Saturday, September 27, 2014 12:14 PM

Answers

All replies

  • Hi,

    I take it you are using PKI/SSL

    0x87d00280 = Empty certificate store

    Have you deployed certificates to clients via a GPO?

    Open MMC on the client - and check the certificate store.


    Saturday, September 27, 2014 12:28 PM
  • Have you mistakenly deployed your site to only use HTTPS client communication?

    Jason | http://blog.configmgrftw.com | @jasonsandys

    Saturday, September 27, 2014 12:54 PM
  • This system is something I inherited from another system admin who set this up so I was unsure of how this was deployed.  I did go in and see that it had been set to deploy using ONLY HTTPS.  I have changed it to use either HTTPS or HTTP now.  Unfortunately I'm still getting the same result of ccmsetup.exe running on the client machine but it is not installing.  I see in the log that I'm still getting the 0x87d00280 error, but that should matter since it is now set to use HTTPS or HTTP correct?

    <IPAddress SubnetAddress="172.XXX.XXX.0" Address="172.XXX.XXX.6"/>
        </IPAddresses>
      </ClientLocationInfo>
    </ContentLocationRequest>
    ']LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="0" thread="5032" file="siteinfo.cpp:96">
    <![LOG[Sending message header '<Msg SchemaVersion="1.1"><ID>{AB0BE041-48D1-4BA3-8B1C-167DB7899CF3}</ID><SourceHost>CLIENTPC</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:CLIENTPC:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>HTTPS://SCCMServer.mydomain.com</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2014-09-27T13:57:13Z</SentTime><Body Type="ByteRange" Offset="0" Length="1082"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>']LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="0" thread="5032" file="siteinfo.cpp:177">
    <![LOG[CCM_POST 'HTTPS://SCCMServer.mydomain.com/ccm_system/request']LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="httphelper.cpp:807">
    <![LOG[Begin searching client certificates based on Certificate Issuers]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="ccmcert.cpp:3833">
    <![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="ccmcert.cpp:3992">
    <![LOG[Begin to select client certificate]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="ccmcert.cpp:4073">
    <![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="0" thread="5032" file="ccmcert.cpp:4109">
    <![LOG[There are no certificates in the 'MY' store.]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="ccmcert.cpp:4131">
    <![LOG[GetSSLCertificateContext failed with error 0x87d00280]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="3" thread="5032" file="ccmsetup.cpp:6025">
    <![LOG[GetHttpRequestObjects failed for verb: 'CCM_POST', url: 'HTTPS://SCCMServer.mydomain.com/ccm_system/request']LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="3" thread="5032" file="httphelper.cpp:947">
    <![LOG[GetDPLocations failed with error 0x87d00280]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="3" thread="5032" file="siteinfo.cpp:532">
    <![LOG[Failed to get DP locations as the expected version from MP 'HTTPS://SCCMServer.mydomain.com'. Error 0x87d00280]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="2" thread="5032" file="ccmsetup.cpp:10926">
    <![LOG[Failed to find DP locations from MP 'HTTPS://SCCMServer.mydomain.com' with error 0x87d00280, status code 200. Check next MP.]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="2" thread="5032" file="ccmsetup.cpp:10782">
    <![LOG[Only one MP HTTPS://SCCMServer.mydomain.com is specified. Use it.]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="ccmsetup.cpp:9745">
    <![LOG[Have already tried all MPs. Couldn't find DP locations.]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="3" thread="5032" file="ccmsetup.cpp:10811">
    <![LOG[GET 'HTTPS://SCCMServer.mydomain.com/CCM_Client/ccmsetup.cab']LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="httphelper.cpp:807">
    <![LOG[Begin searching client certificates based on Certificate Issuers]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="ccmcert.cpp:3833">
    <![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="ccmcert.cpp:3992">
    <![LOG[Begin to select client certificate]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="ccmcert.cpp:4073">
    <![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="0" thread="5032" file="ccmcert.cpp:4109">
    <![LOG[There are no certificates in the 'MY' store.]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="ccmcert.cpp:4131">
    <![LOG[GetSSLCertificateContext failed with error 0x87d00280]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="3" thread="5032" file="ccmsetup.cpp:6025">
    <![LOG[GetHttpRequestObjects failed for verb: 'GET', url: 'HTTPS://SCCMServer.mydomain.com/CCM_Client/ccmsetup.cab']LOG]!><time="09:57:13.420+240" date="09-27-2014" component="ccmsetup" context="" type="3" thread="5032" file="httphelper.cpp:947">
    <![LOG[DownloadFileByWinHTTP failed with error 0x87d00280]LOG]!><time="09:57:13.420+240" date="09-27-2014" component="ccmsetup" context="" type="3" thread="5032" file="httphelper.cpp:1081">
    <![LOG[CcmSetup failed with error code 0x87d00280]LOG]!><time="09:57:13.420+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="960" file="ccmsetup.cpp:10544">

    Saturday, September 27, 2014 2:03 PM
  • Have you checked all the client machine can communicate to DP .No Windows Firewall is blocking?
    Sunday, September 28, 2014 7:02 AM
  • Before you change everything to HTTP find out if there is a requirement for PKI / SSL

    For example you might be managing apple mac devices that require this kind of configuration. 

    Examine a machine in the environment that is currently working.

    Have a look at this url:

    http://sccmguy.com/2013/11/27/pki-certificates-for-configuration-manager-2012-r2-part-24-client-certificate-for-windows-computers/

    From step :

    Auto enrolling the Workstation Authentication Security Template and Verifying its Installation on the Client Computer

    Your working machine will already have the client certificate inplace. All you might need to do is make sure the other devices are receiving the correct GPO and have the client certificate in place.


    Sunday, September 28, 2014 3:48 PM
  • Hi,

    Please check management point properties in Servers and Site System Roles to see if the Client connections is HTTP.

    You could uncheck "Use PKI client certificate when available", then try to deploy http client.

    Best Regards,

    Joyce


    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

    Monday, September 29, 2014 8:50 AM
  • Brijj1 - The firewall is turned off of the client PC and the client PC seems to be able to talk to the DP.

    Rich.k - I have configured the CA and DC for auto enrollment and it seems to be working after checking the client PC for the cert.  Currently no client PC is working for pushing the client so I can't determine what might working with a known good one.

    Joyce  L - I selected the MP and DP roles to both only use HTTP as well as unchecking "Use PKI client certificate when available".  The client PC still shows that the ccmsetup.exe is trying to run, but getting this error code now.  Once again I apologize for the help I'm needing.  I'm very new to SCCM and was not the one who set this up originally.

    <IPAddress SubnetAddress="172.XXX.XXX.0" Address="172.XXX.XXX.6"/>
        </IPAddresses>
      </ClientLocationInfo>
    </ContentLocationRequest>
    ']LOG]!><time="08:36:52.922+240" date="09-29-2014" component="ccmsetup" context="" type="0" thread="4688" file="siteinfo.cpp:96">
    <![LOG[Sending message header '<Msg SchemaVersion="1.1"><ID>{5E9631F7-BB21-4F46-972F-A90933B2E45C}</ID><SourceHost>ClientPC</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:CLIENTPC:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>SCCMServer.mydomain.com</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2014-09-29T12:36:52Z</SentTime><Body Type="ByteRange" Offset="0" Length="1082"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>']LOG]!><time="08:36:52.922+240" date="09-29-2014" component="ccmsetup" context="" type="0" thread="4688" file="siteinfo.cpp:177">
    <![LOG[CCM_POST 'HTTP://SCCMServer.mydomain.com/ccm_system/request']LOG]!><time="08:36:52.922+240" date="09-29-2014" component="ccmsetup" context="" type="1" thread="4688" file="httphelper.cpp:807">
    <![LOG[Failed to receive ccm message response. Status code = 404]LOG]!><time="08:36:52.922+240" date="09-29-2014" component="ccmsetup" context="" type="2" thread="4688" file="httphelper.cpp:1694">
    <![LOG[GetDPLocations failed with error 0x80004005]LOG]!><time="08:36:52.922+240" date="09-29-2014" component="ccmsetup" context="" type="3" thread="4688" file="siteinfo.cpp:532">
    <![LOG[Failed to get DP locations as the expected version from MP 'SCCMServer.mydomain.com'. Error 0x80004005]LOG]!><time="08:36:52.922+240" date="09-29-2014" component="ccmsetup" context="" type="2" thread="4688" file="ccmsetup.cpp:10926">
    <![LOG[A Fallback Status Point has not been specified.  Message with STATEID='101' will not be sent.]LOG]!><time="08:36:52.922+240" date="09-29-2014" component="ccmsetup" context="" type="1" thread="4688" file="ccmsetup.cpp:9428">
    <![LOG[Next retry in 10 minute(s)...]LOG]!><time="08:36:52.922+240" date="09-29-2014" component="ccmsetup" context="" type="0" thread="4688" file="ccmsetup.cpp:8498">

    Monday, September 29, 2014 12:44 PM
  • Thank you all for your help and suggestions.  I have been able to get this issue resolved.  As I said before since I inherited this system from the previous system admin I was a little lost.  I found a great article that helped with showing me the basics that were evidently "missed" when it had been setup originally.

    http://www.windows-noob.com/forums/index.php?/topic/4045-system-center-2012-configuration-manager-step-by-step-guides/

    I appreciate all your help regarding my issue.  Thank you very much!

    • Marked as answer by yinyang7h Tuesday, September 30, 2014 11:16 AM
    Tuesday, September 30, 2014 11:16 AM