Asked by:
Client Installation During OS deployment issue

Question
-
Hi, guys!
I have site with HTTP-mode MP.
During regular network OS deployment all works well.
But, if I boot PC from sccm boot image from USB-drive the client try to connect MP using HTTPS and TS Fails
In the TS media creation wizard I choose Self-Signed certificate.
How can I fix it?
Monday, May 30, 2016 12:16 PM
All replies
-
How did you determine that?
Torsten Meringer | http://www.mssccmfaq.de
Monday, May 30, 2016 12:30 PM -
from ccmsetup.logMonday, May 30, 2016 12:56 PM
-
==========[ ccmsetup started in process 1096 ]========== ccmsetup 30.05.2016 17:29:08 1108 (0x0454) Launch from folder C:\_SMSTaskSequence\OSD\ART000C8\ ccmsetup 30.05.2016 17:29:08 1108 (0x0454) CcmSetup version: 5.0.8355.1003 ccmsetup 30.05.2016 17:29:08 1108 (0x0454) Folder 'Microsoft\Microsoft\Configuration Manager' not found. Task does not exist. ccmsetup 30.05.2016 17:29:08 1108 (0x0454) Folder 'Microsoft\Microsoft\Configuration Manager' not found. Task does not exist. ccmsetup 30.05.2016 17:29:08 1108 (0x0454) [MININT-DELL] Running on 'Microsoft Windows 10 Enterprise' (10.0.10240). Service Pack (0.0). SuiteMask = 272. Product Type = 18 ccmsetup 30.05.2016 17:29:09 1108 (0x0454) Ccmsetup command line: "C:\_SMSTaskSequence\OSD\ART000C8\ccmsetup.exe" /useronly /source:C:\_SMSTaskSequence\OSD\ART000C8 /config:MobileClient.TCF /status:752 ccmsetup 30.05.2016 17:29:09 1108 (0x0454) Command line parameters for ccmsetup have been specified. No registry lookup for command line parameters is required. ccmsetup 30.05.2016 17:29:09 1108 (0x0454) Command line: "C:\_SMSTaskSequence\OSD\ART000C8\ccmsetup.exe" /useronly /source:C:\_SMSTaskSequence\OSD\ART000C8 /config:MobileClient.TCF /status:752 ccmsetup 30.05.2016 17:29:09 1108 (0x0454) Copying config file from C:\_SMSTaskSequence\OSD\ART000C8\MobileClient.TCF to folder C:\WINDOWS\ccmsetup\. Return result: 0x0 ccmsetup 30.05.2016 17:29:09 1108 (0x0454) SslState value: 224 ccmsetup 30.05.2016 17:29:09 1108 (0x0454) CCMHTTPPORT: 80 ccmsetup 30.05.2016 17:29:09 1108 (0x0454) CCMHTTPSPORT: 443 ccmsetup 30.05.2016 17:29:09 1108 (0x0454) CCMHTTPSSTATE: 480 ccmsetup 30.05.2016 17:29:09 1108 (0x0454) CCMHTTPSCERTNAME: ccmsetup 30.05.2016 17:29:09 1108 (0x0454) FSP: SC2012SERVER ccmsetup 30.05.2016 17:29:09 1108 (0x0454) CCMCERTISSUERS: CN=DataArt Root CA; O=DataArt Enterprises, Inc.; E=ca@dataart.com ccmsetup 30.05.2016 17:29:09 1108 (0x0454) CCMFIRSTCERT: 1 ccmsetup 30.05.2016 17:29:09 1108 (0x0454) Config file: C:\WINDOWS\ccmsetup\MobileClientUnicode.tcf ccmsetup 30.05.2016 17:29:09 1108 (0x0454) Retry time: 10 minute(s) ccmsetup 30.05.2016 17:29:09 1108 (0x0454) MSI log file: C:\WINDOWS\ccmsetup\Logs\client.msi.log ccmsetup 30.05.2016 17:29:09 1108 (0x0454) MSI properties: INSTALL="ALL" SMSCACHESIZE="10240" SMSPROVISIONINGMODE="1" SMSSITECODE="ART" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="480" FSP="SC2012SERVER" CCMCERTISSUERS="CN=Root CA; O=Enterprises, Inc.; E=ca@d.com" CCMFIRSTCERT="1" ccmsetup 30.05.2016 17:29:09 1108 (0x0454) Source List: ccmsetup 30.05.2016 17:29:09 1108 (0x0454) \\SC2012SERVER\SMSClient ccmsetup 30.05.2016 17:29:09 1108 (0x0454) C:\_SMSTaskSequence\OSD\ART000C8 ccmsetup 30.05.2016 17:29:09 1108 (0x0454) \\SC2012SERVER\SMSClient ccmsetup 30.05.2016 17:29:09 1108 (0x0454) MPs: ccmsetup 30.05.2016 17:29:09 1108 (0x0454) HTTPS://SC2012SERVER ccmsetup 30.05.2016 17:29:09 1108 (0x0454) MapNLMCostDataToCCMCost() returning Cost 0x1 ccmsetup 30.05.2016 17:29:09 1108 (0x0454) No version of the client is currently detected. ccmsetup 30.05.2016 17:29:09 1108 (0x0454) Folder 'Microsoft\Configuration Manager' not found. Task does not exist. ccmsetup 30.05.2016 17:29:09 1108 (0x0454) Updated security on object C:\WINDOWS\ccmsetup\. ccmsetup 30.05.2016 17:29:09 1108 (0x0454) Failed to get client version for sending state messages. Error 0x8004100e ccmsetup 30.05.2016 17:29:09 1108 (0x0454) Params to send '5.0.8355.1003 Deployment Error: 0x0, ' ccmsetup 30.05.2016 17:29:09 1108 (0x0454) Sending Fallback Status Point message to 'SC2012SERVER', STATEID='100'. ccmsetup 30.05.2016 17:29:09 1108 (0x0454) <ClientDeploymentMessage ErrorCode="0"><Client Baseline="1" Platform="2"/></ClientDeploymentMessage> ccmsetup 30.05.2016 17:29:09 1108 (0x0454) State message with TopicType 800 and TopicId {673823F0-C019-4164-9554-154C7A3AA28C} has been sent to the FSP FSPStateMessage 30.05.2016 17:29:11 1108 (0x0454) Downloading file C:\_SMSTaskSequence\OSD\ART000C8\ccmsetup.exe ccmsetup 30.05.2016 17:29:12 1108 (0x0454) Downloading C:\_SMSTaskSequence\OSD\ART000C8\ccmsetup.exe to C:\WINDOWS\ccmsetup\ccmsetup.exe ccmsetup 30.05.2016 17:29:12 1108 (0x0454) File download 14% complete (262144 of 1800888 bytes). ccmsetup 30.05.2016 17:29:12 1108 (0x0454) File download 29% complete (524288 of 1800888 bytes). ccmsetup 30.05.2016 17:29:12 1108 (0x0454) File download 43% complete (786432 of 1800888 bytes). ccmsetup 30.05.2016 17:29:12 1108 (0x0454) File download 58% complete (1048576 of 1800888 bytes). ccmsetup 30.05.2016 17:29:12 1108 (0x0454) File download 72% complete (1310720 of 1800888 bytes). ccmsetup 30.05.2016 17:29:12 1108 (0x0454) File download 87% complete (1572864 of 1800888 bytes). ccmsetup 30.05.2016 17:29:12 1108 (0x0454) File download 100% complete (1800888 of 1800888 bytes). ccmsetup 30.05.2016 17:29:12 1108 (0x0454) Download complete. ccmsetup 30.05.2016 17:29:12 1108 (0x0454) Detected 682489 MB free disk space on system drive. ccmsetup 30.05.2016 17:29:13 1108 (0x0454) Client OS Version 6.2 Service Pack 0.0 ccmsetup 30.05.2016 17:29:13 1108 (0x0454) Failed to get UWF_Filter instance. UWF Feature not installed. HRESULT=0x80041010 ccmsetup 30.05.2016 17:29:13 1108 (0x0454) Running as user "SYSTEM" ccmsetup 30.05.2016 17:29:13 1108 (0x0454) Checking Write Filter Status. ccmsetup 30.05.2016 17:29:13 1108 (0x0454) This is not a supported write filter device. We are not in a write filter maintenance mode. ccmsetup 30.05.2016 17:29:13 1108 (0x0454) Performing AD query: '(&(ObjectCategory=mSSMSManagementPoint)(mSSMSDefaultMP=TRUE)(mSSMSSiteCode=ART))' ccmsetup 30.05.2016 17:29:14 1108 (0x0454) OperationalXml '<ClientOperationalSettings><Version>5.00.8355.1000</Version><SecurityConfiguration><SecurityModeMask>0</SecurityModeMask><SecurityModeMaskEx>480</SecurityModeMaskEx><HTTPPort>80</HTTPPort><HTTPSPort>443</HTTPSPort><CertificateStoreName></CertificateStoreName><CertificateIssuers>CN=Root; O=Enterprises; E=ca@d.com</CertificateIssuers><CertificateSelectionCriteria></CertificateSelectionCriteria><CertificateSelectFirstFlag>1</CertificateSelectFirstFlag><SiteSigningCert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iteSigningCert></SecurityConfiguration><RootSiteCode>ART</RootSiteCode><CCM> <CommandLine>SMSCACHESIZE=10240 SMSSITECODE=ART</CommandLine> </CCM><FSP> <FSPServer>SC2012SERVER</FSPServer> </FSP><Capabilities SchemaVersion ="1.0"><Property Name="SSLState" Value="0" /></Capabilities><Domain Value="universe.dart.spb" /><Forest Value="universe.dart.spb" /></ClientOperationalSettings>' ccmsetup 30.05.2016 17:29:15 1108 (0x0454) Unable to open Registry Value Software\Microsoft\CCM\HttpsState. Return Code [80070002]. Client HTTPS state is Unknown. ccmsetup 30.05.2016 17:29:16 1108 (0x0454) The MP name retrieved is 'SC2012SERVER' with version '8355' and capabilities '<Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities>' ccmsetup 30.05.2016 17:29:16 1108 (0x0454) MP 'SC2012SERVER' is compatible ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Retrieved 1 MP records from AD for site 'ART' ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Retrived site version '5.00.8355.1000' from AD for site 'ART' ccmsetup 30.05.2016 17:29:16 1108 (0x0454) SiteCode: ART ccmsetup 30.05.2016 17:29:16 1108 (0x0454) SiteVersion: 5.00.8355.1000 ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Only one MP HTTPS://SC2012SERVER is specified. Use it. ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Searching for DP locations from MP(s)... ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Current AD site of machine is s60 LocationServices 30.05.2016 17:29:16 1108 (0x0454) Local Machine is joined to an AD domain LocationServices 30.05.2016 17:29:16 1108 (0x0454) Current AD forest name is universe.dart.spb, domain name is universe.dart.spb LocationServices 30.05.2016 17:29:16 1108 (0x0454) DhcpGetOriginalSubnetMask entry point is supported. LocationServices 30.05.2016 17:29:16 1108 (0x0454) Begin checking Alternate Network Configuration LocationServices 30.05.2016 17:29:16 1108 (0x0454) Finished checking Alternate Network Configuration LocationServices 30.05.2016 17:29:16 1108 (0x0454) Adapter {301CEE78-DC24-44ED-A1A5-75913770AF10} is DHCP enabled. Checking quarantine status. LocationServices 30.05.2016 17:29:16 1108 (0x0454) Adapter {E02C1274-1EC9-4079-B573-2CFAC2A38159} is DHCP enabled. Checking quarantine status. LocationServices 30.05.2016 17:29:16 1108 (0x0454) Adapter {02DC10A1-D8A2-4D3C-A798-0AD37A80FBB0} is DHCP enabled. Checking quarantine status. LocationServices 30.05.2016 17:29:16 1108 (0x0454) Sending message body '<ContentLocationRequest SchemaVersion="1.00"> <AssignedSite SiteCode="ART"/> <ClientPackage/> <ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0" UseInternetDP="0"> <ADSite Name="s60"/> <Forest Name="univer"/> <Domain Name="univer"/> <IPAddresses> <IPAddress SubnetAddress="192.168.8.0" Address="192.168.9.85"/> <IPAddress SubnetAddress="2001:067C:0438:0051" Address="2001:067C:0438:0051:CDB0:2992:4478:BDB9"/> <IPAddress SubnetAddress="2001:067C:0438:0051" Address="2001:067C:0438:0051:E8AF:61F1:77C6:CB5F"/> <IPAddress SubnetAddress="2001:067C:0438:0051" Address="2001:067C:0438:0051:0094:9A37:D0F4:72DE"/> </IPAddresses> </ClientLocationInfo> </ContentLocationRequest> ' ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Sending message header '<Msg SchemaVersion="1.1"><ID>{CBC8EE9C-A35E-47A3-87E0-345BB42C993E}</ID><SourceID></SourceID><SourceHost>MININT-DELL</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:MININT-DELL:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>HTTPS://SC2012SERVER</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2016-05-30T14:29:16Z</SentTime><Body Type="ByteRange" Offset="0" Length="1706"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>' ccmsetup 30.05.2016 17:29:16 1108 (0x0454) MapNLMCostDataToCCMCost() returning Cost 0x1 ccmsetup 30.05.2016 17:29:16 1108 (0x0454) CCM_POST 'HTTPS://SC2012SERVER/ccm_system/request' ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Begin searching client certificates based on Certificate Issuers ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Certificate Issuer 1 [CN=Root; O=Enterprises; E=ca@d.com] ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Finding certificate by issuer chain returned error 80092004 ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Completed searching client certificates based on Certificate Issuers ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Unable to find any Certificate based on Certificate Issuers ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Locate client certificate bypassing Certificate Issuers restriction ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Begin searching client certificates based on Certificate Issuers ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Completed searching client certificates based on Certificate Issuers ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Begin to select client certificate ccmsetup 30.05.2016 17:29:16 1108 (0x0454) The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'. ccmsetup 30.05.2016 17:29:16 1108 (0x0454) There are no certificates in the 'MY' store. ccmsetup 30.05.2016 17:29:16 1108 (0x0454) GetSSLCertificateContext failed with error 0x87d00280 ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Failed to get client version for sending state messages. Error 0x8004100e ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Params to send '5.0.8355.1003 Deployment Error: 0x87d00280, ' ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Sending Fallback Status Point message to 'SC2012SERVER', STATEID='315'. ccmsetup 30.05.2016 17:29:16 1108 (0x0454) <ClientDeploymentMessage ErrorCode="-2016411008"><Client Baseline="1" Platform="2"/></ClientDeploymentMessage> ccmsetup 30.05.2016 17:29:16 1108 (0x0454) State message with TopicType 800 and TopicId {88F0D559-CCEB-4733-9B8A-0326911712E9} has been sent to the FSP FSPStateMessage 30.05.2016 17:29:16 1108 (0x0454) GetHttpRequestObjects failed for verb: 'CCM_POST', url: 'HTTPS://SC2012SERVER/ccm_system/request' ccmsetup 30.05.2016 17:29:16 1108 (0x0454) GetDPLocations failed with error 0x87d00280 ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Failed to get DP locations as the expected version from MP 'HTTPS://SC2012SERVER'. Error 0x87d00280 ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Failed to get client version for sending state messages. Error 0x8004100e ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Params to send '5.0.8355.1003 Deployment Error: 0x0, ' ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Sending Fallback Status Point message to 'SC2012SERVER', STATEID='101'. ccmsetup 30.05.2016 17:29:16 1108 (0x0454) <ClientDeploymentMessage ErrorCode="0"><Client Baseline="1" Platform="2"/></ClientDeploymentMessage> ccmsetup 30.05.2016 17:29:16 1108 (0x0454) State message with TopicType 800 and TopicId {77C162FE-BCC0-4971-AB04-53E3102B2F91} has been sent to the FSP FSPStateMessage 30.05.2016 17:29:16 1108 (0x0454) Next retry in 10 minute(s)... ccmsetup 30.05.2016 17:29:16 1108 (0x0454) Current AD forest name is universe.dart.spb, domain name is universe.dart.spb LocationServices 30.05.2016 17:39:19 1108 (0x0454) Domain joined client is in Intranet LocationServices 30.05.2016 17:39:19 1108 (0x0454) Current AD site of machine is s60 LocationServices 30.05.2016 17:39:20 1108 (0x0454) DHCP entry points already initialized. LocationServices 30.05.2016 17:39:20 1108 (0x0454) Begin checking Alternate Network Configuration LocationServices 30.05.2016 17:39:20 1108 (0x0454) Finished checking Alternate Network Configuration LocationServices 30.05.2016 17:39:20 1108 (0x0454) Adapter {301CEE78-DC24-44ED-A1A5-75913770AF10} is DHCP enabled. Checking quarantine status. LocationServices 30.05.2016 17:39:20 1108 (0x0454) Adapter {E02C1274-1EC9-4079-B573-2CFAC2A38159} is DHCP enabled. Checking quarantine status. LocationServices 30.05.2016 17:39:20 1108 (0x0454) Adapter {02DC10A1-D8A2-4D3C-A798-0AD37A80FBB0} is DHCP enabled. Checking quarantine status. LocationServices 30.05
- Edited by Ivan.Begeza Monday, May 30, 2016 3:14 PM
Monday, May 30, 2016 3:10 PM -
What MP did you specify when creating the media? Was it HTTPS enabled when you created the media or is it now?
Jason | http://blog.configmgrftw.com | @jasonsandys
Monday, May 30, 2016 3:27 PM -
That is the reason
Config file: C:\WINDOWS\ccmsetup\MobileClientUnicode.tcf
Monday, May 30, 2016 3:31 PM