locked
sccm 2012 client install fails with error 0x87d00280 RRS feed

  • Question

  • Configuration manager client is copied to the local machine, then when the install kicks it does not finish. This is the ccmlog from the client machine. The server has a valid SSL cert. I read somewhere that someone resolved this error by installing a personal computer cert on the client, but did not elaborate anymore about this. here is the ccmlog below:

    GetHttpRequestObjects failed for verb: 'CCM_POST', url: 'HTTPS://NR-SCE.ad.nursing.Virginia.EDU/ccm_system/request'
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    GetDPLocations failed with error 0x87d00280 ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    Failed to find DP locations with error 0x87d00280, status code 200. Check next MP.
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    Only one MP HTTPS://NR-SCE.ad.nursing.Virginia.EDU is specified. Use it.
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    Have already tried all MPs. Couldn't find DP locations.
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    GET 'HTTPS://NR-SCE.ad.nursing.Virginia.EDU/CCM_Client/ccmsetup.cab'
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    Begin searching client certificates based on Certificate Issuers
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    Certificate Issuer 1 [CN=AddTrust External CA Root; OU=AddTrust External TTP Network; O=AddTrust AB; C=SE]
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    Certificate Issuer 2 [CN=InCommon Server CA; OU=InCommon; O=Internet2; C=US]
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    Finding certificate by issuer chain returned error 80092004
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    Completed searching client certificates based on Certificate Issuers
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    Unable to find any Certificate based on Certificate Issuers
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    Locate client certificate bypassing Certificate Issuers restriction
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    Begin searching client certificates based on Certificate Issuers
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    Completed searching client certificates based on Certificate Issuers
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)

    Begin to select client certificate
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'. ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    There are no certificates in the 'MY' store.
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    GetSSLCertificateContext failed with error 0x87d00280 ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    GetHttpRequestObjects failed for verb: 'GET', url: 'HTTPS://NR-SCE.ad.nursing.Virginia.EDU/CCM_Client/ccmsetup.cab'
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    DownloadFileByWinHTTP failed with error 0x87d00280
    ccmsetup 1/4/2013 09:29:19 10112 (0x2780)
    CcmSetup failed with error code 0x87d00280 ccmsetup 1/4/2013 09:29:19 5360 (0x14F0)

    Thanks,

    Nua

    Friday, January 4, 2013 3:42 PM

All replies

  • Is your MP configured to use HTTPS only?

    Have you deployed certificates to your clients?


    Jason | http://blog.configmgrftw.com

    Friday, January 4, 2013 4:12 PM
  • Yes the MP is set to HTTPS. I do have Client Computer Communication set to HTTPS or HTTP. The computers do have the SSL cert in there trusted certificates. What certificate do the clients need?

    Thanks

    Friday, January 25, 2013 12:52 PM
  • I'd suggest reading the documentation then following it through to complete your infrastructure configuration. Check my signature out below for links into the documentation library. HTTPS mode has lots of requirements that you will need to honor.


    Rob Marshall | UK | My Blog | WMUG | File CM12 Feedback | CM12 Docs | CM12 Release Notes

    Friday, January 25, 2013 12:54 PM