none
SCCM 2012 SP1 Mac Communication Problem RRS feed

  • Question

  • Hi everyone!

    I'm testing SCCM 2012 SP1 environment with Mac OS X client. Client installation and cert enrollment went fine without any errors and that new Mac client shows up in Configmgr console as a mobile device. However, they never show as computers and display “Inactive.” No hardware inventory information is received.

    The Mac config manager shows that it is connecting and displays a last connection time. Any ideas?

    Thank you in advance.

    Here is error information pulled from CCMCLIENT.log from Mac

    Failed to GetProperty Mode from Configuration Provider : 80070490

    No Preferences found for Key - 'OMAMaxMessageLimit', Domain - 'com.microsoft.ccmclient'.         Default  2/4/2013 10:03:23 AM      2955517952 (0xB029A000)

    MaxMessageSize from Config file is <= 25KB. Defaulting to 49152            Default  2/4/2013 10:03:23 AM    2955517952 (0xB029A000)

    No Preferences found for Key - 'LastActiveUser', Domain - 'com.microsoft.ccmclient'.          Default  2/4/2013 10:03:23 AM            2955517952 (0xB029A000)

    No Preferences found for Key - 'LastActiveUserUID', Domain - 'com.microsoft.ccmclient'.    Default  2/4/2013 10:03:23 AM            2955517952 (0xB029A000)

    No Preferences found for Key - 'LastActiveUserGID', Domain - 'com.microsoft.ccmclient'.    Default  2/4/2013 10:03:23 AM            2955517952 (0xB029A000)

    No Preferences found for Key - 'OMAMaxMessageLimit', Domain - 'com.microsoft.ccmclient'.         Default  2/4/2013 10:03:52 AM      2955517952 (0xB029A000)

    MaxMessageSize from Config file is <= 25KB. Defaulting to 49152            Default  2/4/2013 10:03:52 AM    2955517952 (0xB029A000)

    No Preferences found for Key - 'OMAMaxMessageLimit', Domain - 'com.microsoft.ccmclient'.         Default  2/4/2013 10:03:52 AM      2955517952 (0xB029A000)

    MaxMessageSize from Config file is <= 25KB. Defaulting to 49152            Default  2/4/2013 10:03:52 AM    2955517952 (0xB029A000)

    Empty CCMHeader Msg Length : 4825, Empty Syncml Package Length : 488           Default  2/4/2013 10:03:52 AM            2955517952 (0xB029A000)

    MaxObjectSize limit reached. CmdLength : 48418 + EmptyPkg Length : 5313 greater than MaxMsgLength : 49152            Default  2/4/2013 10:03:52 AM    2955517952 (0xB029A000)

    LargeObject will be sent in Next roundtrip           Default  2/4/2013 10:03:52 AM    2955517952 (0xB029A000)

    OMA : Sending Notification to UI : <CCMClientNotification><Sender>Service</Sender><Name></Name><Id></Id><Type>CCM_OMA</Type><State>Progress</State><Data></Data><Description></Description><RebootRequired></RebootRequired><Time></Time></CCMClientNotification>            Default  2/4/2013 10:03:52 AM    2955517952 (0xB029A000)

    CCMClient - Broadcasting Msg to UI : <CCMClientNotification><Sender>Service</Sender><Name></Name><Id></Id><Type>CCM_OMA</Type><State>Progress</State><Data></Data><Description></Description><RebootRequired></RebootRequired><Time></Time></CCMClientNotification>            Default  2/4/2013 10:03:52 AM    2692625728 (0xA07E3540)

    Failed to GetProperty Mode from Configuration Provider : 80070490         Default  2/4/2013 10:03:52 AM    2955517952 (0xB029A000)

    Here is what is in the SMS_DM.log

    <![LOG[Entering Application_Error]LOG]!><time="10:03:53.2587460" date="2-4-2013" component="DMProxyEngine" context="" type="3" thread="55" file="">

    <![LOG[Application_Error Exception: System.ArgumentException: Property Get not found in SyncML message.    at Microsoft.ConfigurationManager.Mobile.ProxyEngine.SessionManager.GetOperationHelper.CorrelateResult(SyncmlSessionContext context, TaskOperationCorrelator taskCorrelator)

       at Microsoft.ConfigurationManager.Mobile.ProxyEngine.SessionManager.SyncmlTranslator.ProcessDeviceRequest(SessionContext sessionContext, IProtocolContext protocolContext)

       at Microsoft.ConfigurationManager.Mobile.ProxyEngine.SessionManager.DeviceSessionManager.Process(DeviceProtoCol protocol, IProtocolContext context, String requestContentType)

       at Microsoft.ConfigurationManager.Mobile.ProxyEngine.SessionManager.ProxyEngineHttpHandler.ProcessClientMessage(DeviceIdentity deviceId, String requestContentType, IProtocolContext protocolContext)

       at Microsoft.ConfigurationManager.Mobile.ProxyEngine.SessionManager.ProxyEngineHttpHandler.ProcessRequest(GatewayFactoryBase baseFactory, HandlerType handlerType, Stream inputStream, String requestContentType, X509Certificate2 certificate, SamlSecurityToken udaToken, String& responseContentType, MemoryStream& outStream)

       at Microsoft.ConfigurationManager.Mobile.ProxyEngine.SessionManager.ProxyEngineHttpHandler.ProcessRequest(HttpContextBase context, GatewayFactoryBase baseFactory)

       at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()

       at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)]LOG]!><time="10:03:53.2587460" date="2-4-2013" component="DMProxyEngine" context="" type="3" thread="55" file="">

    <![LOG[Application_Error Response Code: BadRequestInProtocol]LOG]!><time="10:03:53.2597429" date="2-4-2013" component="DMProxyEngine" context="" type="3" thread="55" file="">


    • Edited by Ry Po Monday, February 4, 2013 3:38 PM
    Monday, February 4, 2013 3:38 PM

Answers

  • I was never able to figure this out but do know it has nothing to do with my server setup. We are starting a rollout of new Macs and successfully installed the Mac client on these Mac's. I do not know what on my existing Mac's is preventing communication.

    • Marked as answer by Ry Po Wednesday, October 30, 2013 11:42 AM
    Wednesday, October 30, 2013 11:42 AM

All replies

  • I am also having a similar issue with my MAC client connecting to the omadm site to retreive their MP.  I followed the microsoft article for configuring the proper PKI certs for the SCCM site web server as well as the mac client cert.  My Mac CCMClient.log looks similar but a bit different.  I am getting some access denied messages that I'm not sure what is not allowing access. Anyone have any ideas? See log:

    ClientGotData: Client 7584F850 died unexpectedly.
    Default 2/5/2013 3:25:56 PM 2887019048 (0xAC146A28)
    Failed to Parse MgmtAuthority ServerList Default 2/5/2013 3:26:35 PM 2955517952 (0xB029A000)
    Failed to get server list Default 2/5/2013 3:26:35 PM 2955517952 (0xB029A000)
    Failed to GetProperty Mode from Configuration Provider : 80070490 Default 2/5/2013 3:26:35 PM 2955517952 (0xB029A000)
    Failed to GetProperty Mode from Configuration Provider : 80070490 Default 2/5/2013 3:26:35 PM 2955517952 (0xB029A000)
    GetHostName failed 80004005 Default 2/5/2013 3:26:35 PM 2955517952 (0xB029A000)
    Failed to Initialize SSL Library. Default 2/5/2013 3:26:35 PM 2955517952 (0xB029A000)
    OMA Session failed with error code 0x80004005
    Default 2/5/2013 3:26:35 PM 2955517952 (0xB029A000)
    Failed to connect to DMP Default 2/5/2013 3:26:35 PM 2955517952 (0xB029A000)
    OMA : Sending Notification to UI : <CCMClientNotification><Sender>Service</Sender><Name></Name><Id></Id><Type>CCM_OMA</Type><State>Error</State><Data>-2147467259</Data><Description></Description><RebootRequired></RebootRequired><Time></Time></CCMClientNotification> Default 2/5/2013 3:26:35 PM 2955517952 (0xB029A000)
    CCMClient - Broadcasting Msg to UI : <CCMClientNotification><Sender>Service</Sender><Name></Name><Id></Id><Type>CCM_OMA</Type><State>Error</State><Data>-2147467259</Data><Description></Description><RebootRequired></RebootRequired><Time></Time></CCMClientNotification> Default 2/5/2013 3:26:35 PM 2887019048 (0xAC146A28)
    No Preferences found for Key - 'OMAFailureRetryDelayInSec', Domain - 'com.microsoft.ccmclient'. Default 2/5/2013 3:26:35 PM 2955517952 (0xB029A000)
    Failed to Parse MgmtAuthority ServerList Default 2/5/2013 3:27:35 PM 2955517952 (0xB029A000)
    Failed to get server list Default 2/5/2013 3:27:35 PM 2955517952 (0xB029A000)
    Failed to GetProperty Mode from Configuration Provider : 80070490 Default 2/5/2013 3:27:35 PM 2955517952 (0xB029A000)
    Failed to GetProperty Mode from Configuration Provider : 80070490 Default 2/5/2013 3:27:35 PM 2955517952 (0xB029A000)
    GetHostName failed 80004005 Default 2/5/2013 3:27:35 PM 2955517952 (0xB029A000)
    Failed to Initialize SSL Library. Default 2/5/2013 3:27:35 PM 2955517952 (0xB029A000)
    OMA Session failed with error code 0x80004005
    Default 2/5/2013 3:27:35 PM 2955517952 (0xB029A000)
    Failed to connect to DMP Default 2/5/2013 3:27:35 PM 2955517952 (0xB029A000)
    OMA : Sending Notification to UI : <CCMClientNotification><Sender>Service</Sender><Name></Name><Id></Id><Type>CCM_OMA</Type><State>Error</State><Data>-2147467259</Data><Description></Description><RebootRequired></RebootRequired><Time></Time></CCMClientNotification> Default 2/5/2013 3:27:35 PM 2955517952 (0xB029A000)
    CCMClient - Broadcasting Msg to UI : <CCMClientNotification><Sender>Service</Sender><Name></Name><Id></Id><Type>CCM_OMA</Type><State>Error</State><Data>-2147467259</Data><Description></Description><RebootRequired></RebootRequired><Time></Time></CCMClientNotification> Default 2/5/2013 3:27:35 PM 2887019048 (0xAC146A28)
    No Preferences found for Key - 'OMAFailureRetryDelayInSec', Domain - 'com.microsoft.ccmclient'. Default 2/5/2013 3:27:35 PM 2955517952 (0xB029A000)
    Failed to Parse MgmtAuthority ServerList Default 2/5/2013 3:28:35 PM 2955517952 (0xB029A000)
    Failed to get server list Default 2/5/2013 3:28:35 PM 2955517952 (0xB029A000)
    Failed to GetProperty Mode from Configuration Provider : 80070490 Default 2/5/2013 3:28:35 PM 2955517952 (0xB029A000)
    Failed to GetProperty Mode from Configuration Provider : 80070490 Default 2/5/2013 3:28:35 PM 2955517952 (0xB029A000)
    GetHostName failed 80004005 Default 2/5/2013 3:28:35 PM 2955517952 (0xB029A000)
    Failed to Initialize SSL Library. Default 2/5/2013 3:28:35 PM 2955517952 (0xB029A000)
    OMA Session failed with error code 0x80004005
    Default 2/5/2013 3:28:35 PM 2955517952 (0xB029A000)
    Failed to connect to DMP Default 2/5/2013 3:28:35 PM 2955517952 (0xB029A000)
    OMA : Sending Notification to UI : <CCMClientNotification><Sender>Service</Sender><Name></Name><Id></Id><Type>CCM_OMA</Type><State>Error</State><Data>-2147467259</Data><Description></Description><RebootRequired></RebootRequired><Time></Time></CCMClientNotification> Default 2/5/2013 3:28:35 PM 2955517952 (0xB029A000)
    CCMClient - Broadcasting Msg to UI : <CCMClientNotification><Sender>Service</Sender><Name></Name><Id></Id><Type>CCM_OMA</Type><State>Error</State><Data>-2147467259</Data><Description></Description><RebootRequired></RebootRequired><Time></Time></CCMClientNotification> Default 2/5/2013 3:28:35 PM 2887019048 (0xAC146A28)
    No Preferences found for Key - 'OMAFailureRetryDelayInSec', Domain - 'com.microsoft.ccmclient'. Default 2/5/2013 3:28:35 PM 2955517952 (0xB029A000)

    Tuesday, February 5, 2013 10:52 PM
  • I got the same error log entries now when I try communication on other macs. Seem like there is something wrong with the DM Proxy or it not allowing communication through it. Everything looks OK with my certificates per the articles from Microsoft on how to configure them.

    Hopefully someone that has successfully configured the Mac's will run into this post and have some input.

    I also found this is my MP_Status.log

    Mp Status: processing event: DMPMSG_ERROR_UNEXPECTED, for machine: SERVER.DOMAIN.com MP_StatusManager 2/6/2013 11:11:11 AM 4380 (0x111C)
    MP Status: SVF file written successfully to "C:\Program Files\Microsoft Configuration Manager\inboxes\statmgr.box\statmsgs\WFUBWOHW.SVF" MP_StatusManager 2/6/2013 11:11:11 AM 4380 (0x111C)

    Wednesday, February 6, 2013 5:04 PM
  • I too have this issue - the MS documentation on this subject is poor and incomplete at best - it needs to be consolidated into one place, and if I ever figure this out, I will probably do it myself!

    My log, for interest:


    <![LOG[Failed to Parse MgmtAuthority ServerList]LOG]!><time="09:19:29.449+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="MgmtAuthorityUtil.cpp:41">
    <![LOG[Failed to get server list]LOG]!><time="09:19:29.449+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="OMADMService.mm:187">
    <![LOG[Failed to GetProperty Mode from Configuration Provider : 80070490]LOG]!><time="09:19:29.449+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="Common_Util.cpp:43">
    <![LOG[Failed to GetProperty Mode from Configuration Provider : 80070490]LOG]!><time="09:19:29.450+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="Common_Util.cpp:43">
    <![LOG[No Preferences found for Key - 'SMSID', Domain - 'com.microsoft.ccmclient'.]LOG]!><time="09:19:29.649+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXUtilities.mm:456">
    <![LOG[Failed to GetProperty Mode from Configuration Provider : 80070490]LOG]!><time="09:19:29.649+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="Common_Util.cpp:43">
    <![LOG[No Preferences found for Key - 'SMSID', Domain - 'com.microsoft.ccmclient'.]LOG]!><time="09:19:29.654+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXUtilities.mm:456">
    <![LOG[Status of SecKeychainGetCSPHandle : 0]LOG]!><time="09:19:29.654+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1792">
    <![LOG[Status of SecKeyGetCSSMKey : 0]LOG]!><time="09:19:29.654+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1806">
    <![LOG[Status of SecKeyGetCredentials 0]LOG]!><time="09:19:29.654+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1822">
    <![LOG[Status of CreateSignatureContext : 0]LOG]!><time="09:19:29.654+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1840">
    <![LOG[Status of SecKeychainGetCSPHandle : 0]LOG]!><time="09:19:29.672+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1792">
    <![LOG[Status of SecKeyGetCSSMKey : 0]LOG]!><time="09:19:29.673+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1806">
    <![LOG[Status of SecKeyGetCredentials 0]LOG]!><time="09:19:29.673+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1822">
    <![LOG[Status of CreateSignatureContext : 0]LOG]!><time="09:19:29.673+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1840">
    <![LOG[No Preferences found for Key - 'OMAMaxMessageLimit', Domain - 'com.microsoft.ccmclient'.]LOG]!><time="09:19:29.692+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXUtilities.mm:456">
    <![LOG[MaxMessageSize from Config file is <= 25KB. Defaulting to 49152]LOG]!><time="09:19:29.693+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="SyncmlSession.cpp:301">
    <![LOG[No Preferences found for Key - 'SMSID', Domain - 'com.microsoft.ccmclient'.]LOG]!><time="09:19:29.693+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXUtilities.mm:456">
    <![LOG[Failed to GetProperty Mode from Configuration Provider : 80070490]LOG]!><time="09:19:29.693+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="Common_Util.cpp:43">
    <![LOG[No Preferences found for Key - 'SMSID', Domain - 'com.microsoft.ccmclient'.]LOG]!><time="09:19:29.698+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXUtilities.mm:456">
    <![LOG[Status of SecKeychainGetCSPHandle : 0]LOG]!><time="09:19:29.698+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1792">
    <![LOG[Status of SecKeyGetCSSMKey : 0]LOG]!><time="09:19:29.698+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1806">
    <![LOG[Status of SecKeyGetCredentials 0]LOG]!><time="09:19:29.698+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1822">
    <![LOG[Status of CreateSignatureContext : 0]LOG]!><time="09:19:29.698+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1840">
    <![LOG[Status of SecKeychainGetCSPHandle : 0]LOG]!><time="09:19:29.716+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1792">
    <![LOG[Status of SecKeyGetCSSMKey : 0]LOG]!><time="09:19:29.716+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1806">
    <![LOG[Status of SecKeyGetCredentials 0]LOG]!><time="09:19:29.716+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1822">
    <![LOG[Status of CreateSignatureContext : 0]LOG]!><time="09:19:29.716+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1840">
    <![LOG[Connect failed with error: invalid certificate chain]LOG]!><time="09:19:29.791+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXUtilities.mm:172">
    <![LOG[SSL HandShake Failed: 80004005]LOG]!><time="09:19:29.791+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="OSXSsl.mm:599">
    <![LOG[Unable to connect.]LOG]!><time="09:19:29.791+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="OSXSyncmlTransport.mm:77">
    <![LOG[OMA Session failed with error code 0x80004005
    ]LOG]!><time="09:19:29.791+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="OMADMService.mm:410">
    <![LOG[Failed to connect to DMP]LOG]!><time="09:19:29.791+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="OMADMService.mm:345">
    <![LOG[OMA : Sending Notification to UI : <CCMClientNotification><Sender>Service</Sender><Name></Name><Id></Id><Type>CCM_OMA</Type><State>Error</State><Data>-2147467259</Data><Description></Description><RebootRequired></RebootRequired><Time></Time></CCMClientNotification>]LOG]!><time="09:19:29.791+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OMADMService.mm:271">
    <![LOG[No Preferences found for Key - 'OMAFailureRetryDelayInSec', Domain - 'com.microsoft.ccmclient'.]LOG]!><time="09:19:29.791+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXUtilities.mm:456">
    <![LOG[CCMClient - Broadcasting Msg to UI : <CCMClientNotification><Sender>Service</Sender><Name></Name><Id></Id><Type>CCM_OMA</Type><State>Error</State><Data>-2147467259</Data><Description></Description><RebootRequired></RebootRequired><Time></Time></CCMClientNotification>]LOG]!><time="09:19:29.791+000" date="02-20-2013" component="Default" context="" type="1" thread="2894346792" file="NotificationProcessor.mm:65">
    <![LOG[Failed to Parse MgmtAuthority ServerList]LOG]!><time="09:20:29.791+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="MgmtAuthorityUtil.cpp:41">
    <![LOG[Failed to get server list]LOG]!><time="09:20:29.791+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="OMADMService.mm:187">
    <![LOG[Failed to GetProperty Mode from Configuration Provider : 80070490]LOG]!><time="09:20:29.791+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="Common_Util.cpp:43">
    <![LOG[Failed to GetProperty Mode from Configuration Provider : 80070490]LOG]!><time="09:20:29.792+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="Common_Util.cpp:43">
    <![LOG[No Preferences found for Key - 'SMSID', Domain - 'com.microsoft.ccmclient'.]LOG]!><time="09:20:30.057+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXUtilities.mm:456">
    <![LOG[Failed to GetProperty Mode from Configuration Provider : 80070490]LOG]!><time="09:20:30.057+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="Common_Util.cpp:43">
    <![LOG[No Preferences found for Key - 'SMSID', Domain - 'com.microsoft.ccmclient'.]LOG]!><time="09:20:30.060+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXUtilities.mm:456">
    <![LOG[Status of SecKeychainGetCSPHandle : 0]LOG]!><time="09:20:30.060+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1792">
    <![LOG[Status of SecKeyGetCSSMKey : 0]LOG]!><time="09:20:30.061+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1806">
    <![LOG[Status of SecKeyGetCredentials 0]LOG]!><time="09:20:30.061+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1822">
    <![LOG[Status of CreateSignatureContext : 0]LOG]!><time="09:20:30.061+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1840">
    <![LOG[Status of SecKeychainGetCSPHandle : 0]LOG]!><time="09:20:30.083+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1792">
    <![LOG[Status of SecKeyGetCSSMKey : 0]LOG]!><time="09:20:30.084+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1806">
    <![LOG[Status of SecKeyGetCredentials 0]LOG]!><time="09:20:30.084+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1822">
    <![LOG[Status of CreateSignatureContext : 0]LOG]!><time="09:20:30.084+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1840">
    <![LOG[No Preferences found for Key - 'OMAMaxMessageLimit', Domain - 'com.microsoft.ccmclient'.]LOG]!><time="09:20:30.101+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXUtilities.mm:456">
    <![LOG[MaxMessageSize from Config file is <= 25KB. Defaulting to 49152]LOG]!><time="09:20:30.101+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="SyncmlSession.cpp:301">
    <![LOG[No Preferences found for Key - 'SMSID', Domain - 'com.microsoft.ccmclient'.]LOG]!><time="09:20:30.101+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXUtilities.mm:456">
    <![LOG[Failed to GetProperty Mode from Configuration Provider : 80070490]LOG]!><time="09:20:30.102+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="Common_Util.cpp:43">
    <![LOG[No Preferences found for Key - 'SMSID', Domain - 'com.microsoft.ccmclient'.]LOG]!><time="09:20:30.104+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXUtilities.mm:456">
    <![LOG[Status of SecKeychainGetCSPHandle : 0]LOG]!><time="09:20:30.104+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1792">
    <![LOG[Status of SecKeyGetCSSMKey : 0]LOG]!><time="09:20:30.104+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1806">
    <![LOG[Status of SecKeyGetCredentials 0]LOG]!><time="09:20:30.104+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1822">
    <![LOG[Status of CreateSignatureContext : 0]LOG]!><time="09:20:30.104+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1840">
    <![LOG[Status of SecKeychainGetCSPHandle : 0]LOG]!><time="09:20:30.124+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1792">
    <![LOG[Status of SecKeyGetCSSMKey : 0]LOG]!><time="09:20:30.125+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1806">
    <![LOG[Status of SecKeyGetCredentials 0]LOG]!><time="09:20:30.125+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1822">
    <![LOG[Status of CreateSignatureContext : 0]LOG]!><time="09:20:30.125+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXCryptoUtil.mm:1840">
    <![LOG[Connect failed with error: invalid certificate chain]LOG]!><time="09:20:30.200+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXUtilities.mm:172">
    <![LOG[SSL HandShake Failed: 80004005]LOG]!><time="09:20:30.200+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="OSXSsl.mm:599">
    <![LOG[Unable to connect.]LOG]!><time="09:20:30.200+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="OSXSyncmlTransport.mm:77">
    <![LOG[OMA Session failed with error code 0x80004005
    ]LOG]!><time="09:20:30.200+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="OMADMService.mm:410">
    <![LOG[Failed to connect to DMP]LOG]!><time="09:20:30.200+000" date="02-20-2013" component="Default" context="" type="3" thread="2955517952" file="OMADMService.mm:345">
    <![LOG[OMA : Sending Notification to UI : <CCMClientNotification><Sender>Service</Sender><Name></Name><Id></Id><Type>CCM_OMA</Type><State>Error</State><Data>-2147467259</Data><Description></Description><RebootRequired></RebootRequired><Time></Time></CCMClientNotification>]LOG]!><time="09:20:30.200+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OMADMService.mm:271">
    <![LOG[CCMClient - Broadcasting Msg to UI : <CCMClientNotification><Sender>Service</Sender><Name></Name><Id></Id><Type>CCM_OMA</Type><State>Error</State><Data>-2147467259</Data><Description></Description><RebootRequired></RebootRequired><Time></Time></CCMClientNotification>]LOG]!><time="09:20:30.200+000" date="02-20-2013" component="Default" context="" type="1" thread="2894346792" file="NotificationProcessor.mm:65">
    <![LOG[No Preferences found for Key - 'OMAFailureRetryDelayInSec', Domain - 'com.microsoft.ccmclient'.]LOG]!><time="09:20:30.200+000" date="02-20-2013" component="Default" context="" type="1" thread="2955517952" file="OSXUtilities.mm:456">

    Wednesday, February 20, 2013 9:25 AM
  • Did anyone get a resolution for this?  I'm finding that my mac system are having the exact same problems.  Client install, enrolled, some systems report check in ok, some reort connection error.  No Mac system data ever shows up in the database.  Listed below is a section from the SMS_DM.log.  Something's wrong but I have no idea what.

     DMProxyEngine 3/4/2013 12:58:14 PM 32 (0x0020)
    Entering Application_Error DMProxyEngine 3/4/2013 12:58:14 PM 32 (0x0020)
    Application_Error Exception: System.ArgumentException: Property Get not found in SyncML message.    at Microsoft.ConfigurationManager.Mobile.ProxyEngine.SessionManager.GetOperationHelper.CorrelateResult(SyncmlSessionContext context, TaskOperationCorrelator taskCorrelator)
       at Microsoft.ConfigurationManager.Mobile.ProxyEngine.SessionManager.SyncmlTranslator.ProcessDeviceRequest(SessionContext sessionContext, IProtocolContext protocolContext)
       at Microsoft.ConfigurationManager.Mobile.ProxyEngine.SessionManager.DeviceSessionManager.Process(DeviceProtoCol protocol, IProtocolContext context, String requestContentType)
       at Microsoft.ConfigurationManager.Mobile.ProxyEngine.SessionManager.ProxyEngineHttpHandler.ProcessClientMessage(DeviceIdentity deviceId, String requestContentType, IProtocolContext protocolContext)
       at Microsoft.ConfigurationManager.Mobile.ProxyEngine.SessionManager.ProxyEngineHttpHandler.ProcessRequest(GatewayFactoryBase baseFactory, HandlerType handlerType, Stream inputStream, String requestContentType, X509Certificate2 certificate, SamlSecurityToken udaToken, String& responseContentType, MemoryStream& outStream)
       at Microsoft.ConfigurationManager.Mobile.ProxyEngine.SessionManager.ProxyEngineHttpHandler.ProcessRequest(HttpContextBase context, GatewayFactoryBase baseFactory)
       at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
       at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) DMProxyEngine 3/4/2013 12:58:14 PM 32 (0x0020)
    Application_Error Response Code: BadRequestInProtocol DMProxyEngine 3/4/2013 12:58:14 PM 32 (0x0020)

     DMProxyEngine 3/4/2013 1:06:06 PM 84 (0x0054)
    ProxyEngineHttpHandler.Process Request exception noticed, Id = GUID:14CC12BC-B8B8-4016-8F01-5BEF3BF7E05E

     Except = System.ArgumentException: Property Get not found in SyncML message.
       at Microsoft.ConfigurationManager.Mobile.ProxyEngine.SessionManager.GetOperationHelper.CorrelateResult(SyncmlSessionContext context,

    Monday, March 4, 2013 9:33 PM
  • Hi the problem is that the ccmclient doesn't have access to the Cert. Once I allowed access I was able to connect. Now I need to script this some how..

    Taken from James Bannan's blog:

    To verify that the certificate has been installed correctly, go to
    Utilities, Keychain Access.  Under Keychains select “System”, and the
    under Category select “My Certificates”.  In the main panel should be a
    certificate registered with the same name as the Mac system.  Expand the
    certificate and it should be linked to a Private Key named “SCCM”. 
    Double-click on the private key and then select “Access Control”.  Under
    “Always allow access by these applications” should be CCMClient and
    CMEnroll.  The CCMClient and CCMAgent applications can be found under
    /Library/Application Support/Microsoft/CCM, along with the Logs folder;

    Thursday, March 21, 2013 12:40 AM
  • Hi Jay,

    Thank you for your response. The private key was set to allow access for all application but I changed it to just the CCMClient and CCMAgent and still am getting the "Failed to Connect to DMP" error.

    A few questions for you.

    When you use CCMEnroll to create the certificate, does it show your username or does it show the computer name? Mine shows my username.

    Are you running SCCM on Server 2012? I am and it says it is supported but wonder if there are issues with that.

    Did you configure SCCM to use a custom FQDN such as SCCM.domain.com or are you using server_name.domain.com?

    Thank you

    Friday, March 22, 2013 1:04 PM
  • Hi Ry Ro,

    do you enrolled the Mac Certificate with your User? I had the same Problem as you, because I didn't cleared the Enroll-Permission on the Certificate for Domain-Admins (I am member of Domain admins) and enrolled the Certificate with my own User.

    Create a User and Group for enrolling the Mac-Certifcate and grant only that Group permissions for the Mac Certificate.

    Enroll the Mac Certificate with the User, witch is member of the Group, that has permissions to enroll only the Mac-Certifcate.

    My Mac tried to use the "Mobile Device" certificate. That failed.

    Enrolling it with another user, witch has only permissions to enroll the Mac-Certificate succeeded.

    Regards,


    Shirkan


    • Edited by Shirkan79 Monday, March 25, 2013 1:22 PM
    Monday, March 25, 2013 1:21 PM
  • Thanks for your help Shirkan. Still does not work. I am still getting the user that enrolls the certificate  as the subject name.

    I created a user called macenroll and added him to the security group that grants read/enroll permissions to the mac client template. The other permissions on that template are Authenticated Users – Read, Doamin/Enterprise Admins – Read/Write.


    • Edited by Ry Po Tuesday, March 26, 2013 1:03 PM
    Tuesday, March 26, 2013 12:58 PM
  • All,

    I have MAC OS X and installed the Root CA on Windows 2008 R2 box and my domain is Windows 2008R2 with have ionstalled SCCM 2012 SP1 on windows 2008R2 box. i followed the steps as mentioned in MS and was able to install the sofware with folllowing commands

    sudo ./ccmsetup

    sudo ./CMEnroll -s <enrollment_proxy_server_name> -ignorecertchainvalidation -u <'user name'>

    and have restaretd my MAC and have got a message on MAC mentioning successfully enrolled. When i go to System preferences and select Configuration Manager and select connect now, i get the following error

    Certificate has Untrusted Root......

    i would need your help on thios

    Ranga

    Saturday, April 27, 2013 6:07 AM
  • Hi Ranga,

    Open Keychain and open your root CA certificate. Under Trust, select "Always Trust" then reboot.

    Thursday, May 2, 2013 11:53 AM
  • About 90% of the errors I am getting from the CCMClient.log from MAC, SMS_DM.log, etc.... brings me to this post in google.  Really getting frustrated with these MACs and SCCM 2012 SP1.  Our test MACs are connecting to the SCCM server but shows as inactive within the SCCM console and all the logs are identical to the ones posted in this post.  Has anyone found a solution for this?  Many thanks in advance for the help!

    Friday, August 9, 2013 5:24 PM
  • Friday, August 9, 2013 5:26 PM
  • try this:

    after you enroll, look at your cert subject name. take that name EXACTLY and use the following command line.

    sudo ./ccmsetup -MP <FQDN of enrollment server> -SubjectName 'subject Name'

    Make sure you use the single quotes on the subject name.

    I'm still trying to figure out why the subject name is incorrectly listed as the requesting user.

    Wednesday, August 14, 2013 5:25 PM
  • Would love for some thoughts and things to try with theses problems, I am having similar issues.
    Monday, August 19, 2013 5:08 PM
  • I have had a case open with Microsoft for 5 months now which frustrated me even more. I began to wonder if anyone there know what they are doing. I am in the process of trying to open a Premier case which I guess will get me close to the engineers of SCCM and not just Techs.

    VLEASUM, it is expected to have the user name listed as the requesting user. In beta, it showed the machine name but not when release but MS confirmed with me that is expected.

    Here is how to request it independently of SCCM to get the machine name.

    http://blogs.technet.com/b/configmgrteam/archive/2013/04/05/how-to-create-and-deploy-a-client-cert-for-mac-independently-from-configmgr.aspx

    I will keep everyone posted on a resolution if I get one.

    Thank you for taking the time to comment.

    Tuesday, August 27, 2013 8:03 PM
  • I was receiving the same errors in the mac client logs as posted above. It took me a while to figure this one out but it is working for me now. If you are unable to browse to the https://SCCMSERVER/omadm directory may be receiving a 500 error. You can enable remote errors and see the specific error for the mac client connection failure. Tracing the error sent me to the following resolution.

    http://msdn.microsoft.com/en-us/library/hh169179(v=nav.70).aspx

    After making the change and resetiis I was able to connect the mac client to the sccm server. Good Luck and hope this helps.

    Wednesday, October 9, 2013 7:00 PM
  • I was never able to figure this out but do know it has nothing to do with my server setup. We are starting a rollout of new Macs and successfully installed the Mac client on these Mac's. I do not know what on my existing Mac's is preventing communication.

    • Marked as answer by Ry Po Wednesday, October 30, 2013 11:42 AM
    Wednesday, October 30, 2013 11:42 AM
  • SCCM 2012 SP1 / ASP.net 4 /IIS

    "Server connection failed. HTTP Response code is 500 and reason is Internal Server Error”.

    Was having an issue enrolling Mac OSX clients initially and traced it back to DMP weirdness in the log as described above.

    Registered asp.net 4 with IIS as described below and everything started working!!!

    http://heinrichandsccm.blogspot.co.uk/2013/05/sccm-2012-sp1-management-point-error.html

    Hope this helps someone as I was dead in the water :)

    Friday, February 21, 2014 10:47 AM
  • Hello Ry Po,

    I have the same troubles as you have. SCCM client works when I deploy it to clear OS X system and makes lots of troubles on "old" systems.

    We are also plan on opening case with Microsoft related to OS X client as it is unpredictable and limited in functionality. Can you send me the number of your case? I have an intention to group cases and force partners from Microsoft to solve the issue of other issues with OS X and SCCM integration.

    Has anybody found a way to redistribute an OS X package to clients other than deleting and readding distribution for the package? As I am extremely dissatisfied with a situation when a user closes the advertisement window or turns off his laptop and runs away at home. After that the advertisement disappears into nowhere and never appears anymore on that machine. I need to recreate the advertisement to solve this issue.

    Sunday, February 23, 2014 7:25 PM
  • the previous answer 'Open Keychain and open your root CA certificate. Under Trust, select "Always Trust" then reboot.' worked for me

    S Abraham

    Wednesday, June 4, 2014 3:17 PM
  • Thanks VLEASUM!

    I missed the single quotes on the syntax. reinstalled it and voila...MAC is installed and registered.
    Thursday, October 2, 2014 10:39 PM
  • SCCM 2012 R2 SP1

    Some Macs (10.9.5) will shows as Active, some will show as Inactive, some show nothing in Client Activity in SCCM (all machines do enroll fine)

    Enrollment type : User

    (it will always be whatever user did the enrollment)

    Followed this which duplicates Authenticated Session

    https://technet.microsoft.com/en-us/library/gg682023.aspx

    edit:

    It seems that it takes time for the machines to actually report anything to SCCM server. Waiting a bit, makes them all come up as Active.

    Only issue I noticed is the fact that if one ie. re-registers machine (by deleting certificates & re-enrolling again) then a NEW computer object gets created with same name in SCCM (it does not re-use already existing object)

    Surely that is wrong? 

    • Edited by scerazy Saturday, September 5, 2015 7:32 AM
    Wednesday, August 26, 2015 12:34 PM
  • All,

    I've installed the SCCM client on the latest OSX-version 10.11(El Capitan). Right after the install the client od connecting 1 time(last successful connection in the Mac-ConfigMgr is the installation time). After that I'm getting the error "Communication with the client service has been lost." Looks like one of the inventorys(hardware?) is messing up the client.

    In this article OSX 10.11 is not supported (yet). https://technet.microsoft.com/en-us/library/gg682077.aspx#BKMK_SupConfigMacClientReq

    Does anyone have the SCCM client working with OSX El Capitan / 10.11 ??????

    Thursday, October 15, 2015 11:34 AM
  • All,

    I've installed the SCCM client on the latest OSX-version 10.11(El Capitan). Right after the install the client od connecting 1 time(last successful connection in the Mac-ConfigMgr is the installation time). After that I'm getting the error "Communication with the client service has been lost." Looks like one of the inventorys(hardware?) is messing up the client.

    In this article OSX 10.11 is not supported (yet). https://technet.microsoft.com/en-us/library/gg682077.aspx#BKMK_SupConfigMacClientReq

    Does anyone have the SCCM client working with OSX El Capitan / 10.11 ??????

    Update: I was too early with the conclusion below. On the Mac the client is connection succesfull. In the SCCM console the device is shown as Client = No for days.... And not working, so no applications get installed and so on....

    I've got the client working with 10.11. I've updated from Yosemite to El Capitan and also renamed the computer. I've deleted the old computername(double entry in SCCM) as a device from the SCCM-db(Assets and Compliance >> Devices). I didn't work after that. I've also deleted the new computername and run a Full system discovery. Initiated a "connect now" from the Mac client en after that the client is connected. I don't know really why I've should deleted both entries. It's not logical to me but it works.

    • Edited by D. Aartman Friday, October 23, 2015 9:38 AM
    Thursday, October 15, 2015 11:49 AM
  • Same here.

    I was able to setup ccm client on 10.10 Upgrade to 10.11 - works.
    If you enroll a clean 10.11 it only manages to register the client but right after on the first attempt to connect gives - Communication with the client service has been lost.

    Looking forward for the client for 10.11!
    Friday, October 23, 2015 10:55 AM
  • Hello does anyone have further confirmation of whether this works, does not work with 10.11. I am able to achieve an initial connection with the Connect Now button. However, subsequent attempts fail "processing" with a "communication with the client service has been lost" error. The event log shows Server died unexpectedly.

    I tried various tricks to create a custom client that did not have hardware/software scan in the policy etc... To no avail. I'd sure love to find something to show management to communicate that we just have to wait for a client or hotfix.

    Tuesday, November 3, 2015 1:35 AM
  • We have to wait for client with support for OS X 10.11. Until then we have to wait with migrating to El Capitan.
    Tuesday, November 10, 2015 8:57 PM
  • On clean 10.11 install I can no longer enroll.

    On Mavericks I used:

    cd Tools
    sudo ./CMEnroll -s server.domain.org -ignorecertchainvalidation -u service-macenroll@domain.org


    which worked just fine
    Now I only get error:

    bookpro-m-11:sccm admin$ sudo ./enrollonly.sh 
    
    Please enter your password.
    
    System Center Configuration Manager Client for Mac OS X
    Version: 5.00.7958.1102
    Copyright 2013 Microsoft Corporation
    
    
     Contacting Server: https://sccm.domain.org/EnrollmentServer/DeviceEnrollmentWebService.svc
    
    Using username: service-macenroll@domain.org
    (null)VERBOSE: Provider Library /Library/Application Support/Microsoft/CCM/ClientConfig.dylib failed to load 
    (null)VERBOSE: Provider Library /Library/Application Support/Microsoft/CCM/ClientConfig.dylib failed to load 
    (null)VERBOSE: Provider Library /Library/Application Support/Microsoft/CCM/ClientConfig.dylib failed to load 
    (null)VERBOSE: Provider Library /Library/Application Support/Microsoft/CCM/ClientConfig.dylib failed to load 
    (null)VERBOSE: Provider Library /Library/Application Support/Microsoft/CCM/ClientConfig.dylib failed to load 
    SecTrustedApplicationCreateFromPath failed with error: UNIX[No such file or directory] 
    
     SSL Connection failed. HTTP Response code is 500 and reason is Internal Server Error 
    
    Server returned: Authentication Error 
    


    https://sccm.domain.org/EnrollmentServer/DeviceEnrollmentWebService.svc

    is perfectly accessible (no error accessing it):

    This is a Windows© Communication Foundation service.
    
    Metadata publishing for this service is currently disabled.

    Anybody any ideas or is it just completely buggered?

    Seb


    Thursday, January 7, 2016 9:35 AM
  • Hi Seb,

    Are you able to access the CRL's (from the Site Servers) of your Certificate Issuing Servers (PKI)?

    Cheers, A.

    Monday, January 11, 2016 1:45 PM