locked
Client Installation During OS deployment issue RRS feed

  • Question

  • Hi, guys!

    I have site with HTTP-mode MP.

    During regular network OS deployment all works well.

    But, if I boot PC from sccm boot image from USB-drive the client try to connect MP using HTTPS and TS Fails

    In the TS media creation wizard I choose Self-Signed certificate.

    How can I fix it?

    Monday, May 30, 2016 12:16 PM

All replies

  • How did you determine that?

    Torsten Meringer | http://www.mssccmfaq.de

    Monday, May 30, 2016 12:30 PM
  • from ccmsetup.log
    Monday, May 30, 2016 12:56 PM
  • ==========[ ccmsetup started in process 1096 ]==========	ccmsetup	30.05.2016 17:29:08	1108 (0x0454)
    Launch from folder C:\_SMSTaskSequence\OSD\ART000C8\	ccmsetup	30.05.2016 17:29:08	1108 (0x0454)
    CcmSetup version: 5.0.8355.1003	ccmsetup	30.05.2016 17:29:08	1108 (0x0454)
    Folder 'Microsoft\Microsoft\Configuration Manager' not found. Task does not exist.	ccmsetup	30.05.2016 17:29:08	1108 (0x0454)
    Folder 'Microsoft\Microsoft\Configuration Manager' not found. Task does not exist.	ccmsetup	30.05.2016 17:29:08	1108 (0x0454)
    [MININT-DELL] Running on 'Microsoft Windows 10 Enterprise' (10.0.10240). Service Pack (0.0). SuiteMask = 272. Product Type = 18	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    Ccmsetup command line: "C:\_SMSTaskSequence\OSD\ART000C8\ccmsetup.exe" /useronly /source:C:\_SMSTaskSequence\OSD\ART000C8 /config:MobileClient.TCF /status:752	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    Command line parameters for ccmsetup have been specified.  No registry lookup for command line parameters is required.	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    Command line: "C:\_SMSTaskSequence\OSD\ART000C8\ccmsetup.exe" /useronly /source:C:\_SMSTaskSequence\OSD\ART000C8 /config:MobileClient.TCF /status:752	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    Copying config file from C:\_SMSTaskSequence\OSD\ART000C8\MobileClient.TCF to folder C:\WINDOWS\ccmsetup\. Return result: 0x0	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    SslState value: 224	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    CCMHTTPPORT:    80	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    CCMHTTPSPORT:    443	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    CCMHTTPSSTATE:    480	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    CCMHTTPSCERTNAME:    	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    FSP:    SC2012SERVER	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    CCMCERTISSUERS:    CN=DataArt Root CA; O=DataArt Enterprises, Inc.; E=ca@dataart.com	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    CCMFIRSTCERT:    1	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    Config file:      C:\WINDOWS\ccmsetup\MobileClientUnicode.tcf	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    Retry time:       10 minute(s)	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    MSI log file:     C:\WINDOWS\ccmsetup\Logs\client.msi.log	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    MSI properties:    INSTALL="ALL" SMSCACHESIZE="10240" SMSPROVISIONINGMODE="1" SMSSITECODE="ART" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="480" FSP="SC2012SERVER" CCMCERTISSUERS="CN=Root CA; O=Enterprises, Inc.; E=ca@d.com" CCMFIRSTCERT="1"	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    Source List:	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
                      \\SC2012SERVER\SMSClient	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
                      C:\_SMSTaskSequence\OSD\ART000C8	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
                      \\SC2012SERVER\SMSClient	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    MPs:	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
                      HTTPS://SC2012SERVER	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    MapNLMCostDataToCCMCost() returning Cost 0x1	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    No version of the client is currently detected.	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    Folder 'Microsoft\Configuration Manager' not found. Task does not exist.	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    Updated security on object C:\WINDOWS\ccmsetup\.	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    Failed to get client version for sending state messages. Error 0x8004100e	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    Params to send '5.0.8355.1003 Deployment Error: 0x0, '	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    Sending Fallback Status Point message to 'SC2012SERVER', STATEID='100'.	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    <ClientDeploymentMessage ErrorCode="0"><Client Baseline="1" Platform="2"/></ClientDeploymentMessage>	ccmsetup	30.05.2016 17:29:09	1108 (0x0454)
    State message with TopicType 800 and TopicId {673823F0-C019-4164-9554-154C7A3AA28C} has been sent to the FSP	FSPStateMessage	30.05.2016 17:29:11	1108 (0x0454)
    Downloading file C:\_SMSTaskSequence\OSD\ART000C8\ccmsetup.exe	ccmsetup	30.05.2016 17:29:12	1108 (0x0454)
    Downloading C:\_SMSTaskSequence\OSD\ART000C8\ccmsetup.exe to C:\WINDOWS\ccmsetup\ccmsetup.exe	ccmsetup	30.05.2016 17:29:12	1108 (0x0454)
    File download 14% complete (262144 of 1800888 bytes).	ccmsetup	30.05.2016 17:29:12	1108 (0x0454)
    File download 29% complete (524288 of 1800888 bytes).	ccmsetup	30.05.2016 17:29:12	1108 (0x0454)
    File download 43% complete (786432 of 1800888 bytes).	ccmsetup	30.05.2016 17:29:12	1108 (0x0454)
    File download 58% complete (1048576 of 1800888 bytes).	ccmsetup	30.05.2016 17:29:12	1108 (0x0454)
    File download 72% complete (1310720 of 1800888 bytes).	ccmsetup	30.05.2016 17:29:12	1108 (0x0454)
    File download 87% complete (1572864 of 1800888 bytes).	ccmsetup	30.05.2016 17:29:12	1108 (0x0454)
    File download 100% complete (1800888 of 1800888 bytes).	ccmsetup	30.05.2016 17:29:12	1108 (0x0454)
    Download complete.	ccmsetup	30.05.2016 17:29:12	1108 (0x0454)
    Detected 682489 MB free disk space on system drive.	ccmsetup	30.05.2016 17:29:13	1108 (0x0454)
    Client OS Version 6.2 Service Pack 0.0	ccmsetup	30.05.2016 17:29:13	1108 (0x0454)
    Failed to get UWF_Filter instance. UWF Feature not installed. HRESULT=0x80041010	ccmsetup	30.05.2016 17:29:13	1108 (0x0454)
    Running as user "SYSTEM"	ccmsetup	30.05.2016 17:29:13	1108 (0x0454)
    Checking Write Filter Status.	ccmsetup	30.05.2016 17:29:13	1108 (0x0454)
    This is not a supported write filter device. We are not in a write filter maintenance mode.	ccmsetup	30.05.2016 17:29:13	1108 (0x0454)
    Performing AD query: '(&(ObjectCategory=mSSMSManagementPoint)(mSSMSDefaultMP=TRUE)(mSSMSSiteCode=ART))'	ccmsetup	30.05.2016 17:29:14	1108 (0x0454)
    OperationalXml '<ClientOperationalSettings><Version>5.00.8355.1000</Version><SecurityConfiguration><SecurityModeMask>0</SecurityModeMask><SecurityModeMaskEx>480</SecurityModeMaskEx><HTTPPort>80</HTTPPort><HTTPSPort>443</HTTPSPort><CertificateStoreName></CertificateStoreName><CertificateIssuers>CN=Root; O=Enterprises; E=ca@d.com</CertificateIssuers><CertificateSelectionCriteria></CertificateSelectionCriteria><CertificateSelectFirstFlag>1</CertificateSelectFirstFlag><SiteSigningCert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iteSigningCert></SecurityConfiguration><RootSiteCode>ART</RootSiteCode><CCM> <CommandLine>SMSCACHESIZE=10240 SMSSITECODE=ART</CommandLine> </CCM><FSP> <FSPServer>SC2012SERVER</FSPServer> </FSP><Capabilities SchemaVersion ="1.0"><Property Name="SSLState" Value="0" /></Capabilities><Domain Value="universe.dart.spb" /><Forest Value="universe.dart.spb" /></ClientOperationalSettings>'	ccmsetup	30.05.2016 17:29:15	1108 (0x0454)
    Unable to open Registry Value Software\Microsoft\CCM\HttpsState. Return Code [80070002]. Client HTTPS state is Unknown.	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    The MP name retrieved is 'SC2012SERVER' with version '8355' and capabilities '<Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities>'	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    MP 'SC2012SERVER' is compatible	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Retrieved 1 MP records from AD for site 'ART'	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Retrived site version '5.00.8355.1000' from AD for site 'ART'	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    SiteCode:         ART	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    SiteVersion:      5.00.8355.1000	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Only one MP HTTPS://SC2012SERVER is specified. Use it.	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Searching for DP locations from MP(s)...	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Current AD site of machine is s60	LocationServices	30.05.2016 17:29:16	1108 (0x0454)
    Local Machine is joined to an AD domain	LocationServices	30.05.2016 17:29:16	1108 (0x0454)
    Current AD forest name is universe.dart.spb, domain name is universe.dart.spb	LocationServices	30.05.2016 17:29:16	1108 (0x0454)
    DhcpGetOriginalSubnetMask entry point is supported.	LocationServices	30.05.2016 17:29:16	1108 (0x0454)
    Begin checking Alternate Network Configuration	LocationServices	30.05.2016 17:29:16	1108 (0x0454)
    Finished checking Alternate Network Configuration	LocationServices	30.05.2016 17:29:16	1108 (0x0454)
    Adapter {301CEE78-DC24-44ED-A1A5-75913770AF10} is DHCP enabled. Checking quarantine status.	LocationServices	30.05.2016 17:29:16	1108 (0x0454)
    Adapter {E02C1274-1EC9-4079-B573-2CFAC2A38159} is DHCP enabled. Checking quarantine status.	LocationServices	30.05.2016 17:29:16	1108 (0x0454)
    Adapter {02DC10A1-D8A2-4D3C-A798-0AD37A80FBB0} is DHCP enabled. Checking quarantine status.	LocationServices	30.05.2016 17:29:16	1108 (0x0454)
    Sending message body '<ContentLocationRequest SchemaVersion="1.00">
      <AssignedSite SiteCode="ART"/>
      <ClientPackage/>
      <ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0" UseInternetDP="0">
        <ADSite Name="s60"/>
        <Forest Name="univer"/>
        <Domain Name="univer"/>
        <IPAddresses>
    <IPAddress SubnetAddress="192.168.8.0" Address="192.168.9.85"/>
    <IPAddress SubnetAddress="2001:067C:0438:0051" Address="2001:067C:0438:0051:CDB0:2992:4478:BDB9"/>
    <IPAddress SubnetAddress="2001:067C:0438:0051" Address="2001:067C:0438:0051:E8AF:61F1:77C6:CB5F"/>
    <IPAddress SubnetAddress="2001:067C:0438:0051" Address="2001:067C:0438:0051:0094:9A37:D0F4:72DE"/>
        </IPAddresses>
      </ClientLocationInfo>
    </ContentLocationRequest>
    '	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Sending message header '<Msg SchemaVersion="1.1"><ID>{CBC8EE9C-A35E-47A3-87E0-345BB42C993E}</ID><SourceID></SourceID><SourceHost>MININT-DELL</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:MININT-DELL:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>HTTPS://SC2012SERVER</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2016-05-30T14:29:16Z</SentTime><Body Type="ByteRange" Offset="0" Length="1706"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>'	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    MapNLMCostDataToCCMCost() returning Cost 0x1	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    CCM_POST 'HTTPS://SC2012SERVER/ccm_system/request'	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Begin searching client certificates based on Certificate Issuers	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Certificate Issuer 1 [CN=Root; O=Enterprises; E=ca@d.com]	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Finding certificate by issuer chain returned error 80092004	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Completed searching client certificates based on Certificate Issuers	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Unable to find any Certificate based on Certificate Issuers	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Locate client certificate bypassing Certificate Issuers restriction	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Begin searching client certificates based on Certificate Issuers	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Completed searching client certificates based on Certificate Issuers	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Begin to select client certificate	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    There are no certificates in the 'MY' store.	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    GetSSLCertificateContext failed with error 0x87d00280	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Failed to get client version for sending state messages. Error 0x8004100e	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Params to send '5.0.8355.1003 Deployment Error: 0x87d00280, '	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Sending Fallback Status Point message to 'SC2012SERVER', STATEID='315'.	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    <ClientDeploymentMessage ErrorCode="-2016411008"><Client Baseline="1" Platform="2"/></ClientDeploymentMessage>	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    State message with TopicType 800 and TopicId {88F0D559-CCEB-4733-9B8A-0326911712E9} has been sent to the FSP	FSPStateMessage	30.05.2016 17:29:16	1108 (0x0454)
    GetHttpRequestObjects failed for verb: 'CCM_POST', url: 'HTTPS://SC2012SERVER/ccm_system/request'	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    GetDPLocations failed with error 0x87d00280	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Failed to get DP locations as the expected version from MP 'HTTPS://SC2012SERVER'. Error 0x87d00280	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Failed to get client version for sending state messages. Error 0x8004100e	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Params to send '5.0.8355.1003 Deployment Error: 0x0, '	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Sending Fallback Status Point message to 'SC2012SERVER', STATEID='101'.	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    <ClientDeploymentMessage ErrorCode="0"><Client Baseline="1" Platform="2"/></ClientDeploymentMessage>	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    State message with TopicType 800 and TopicId {77C162FE-BCC0-4971-AB04-53E3102B2F91} has been sent to the FSP	FSPStateMessage	30.05.2016 17:29:16	1108 (0x0454)
    Next retry in 10 minute(s)...	ccmsetup	30.05.2016 17:29:16	1108 (0x0454)
    Current AD forest name is universe.dart.spb, domain name is universe.dart.spb	LocationServices	30.05.2016 17:39:19	1108 (0x0454)
    Domain joined client is in Intranet	LocationServices	30.05.2016 17:39:19	1108 (0x0454)
    Current AD site of machine is s60	LocationServices	30.05.2016 17:39:20	1108 (0x0454)
    DHCP entry points already initialized.	LocationServices	30.05.2016 17:39:20	1108 (0x0454)
    Begin checking Alternate Network Configuration	LocationServices	30.05.2016 17:39:20	1108 (0x0454)
    Finished checking Alternate Network Configuration	LocationServices	30.05.2016 17:39:20	1108 (0x0454)
    Adapter {301CEE78-DC24-44ED-A1A5-75913770AF10} is DHCP enabled. Checking quarantine status.	LocationServices	30.05.2016 17:39:20	1108 (0x0454)
    Adapter {E02C1274-1EC9-4079-B573-2CFAC2A38159} is DHCP enabled. Checking quarantine status.	LocationServices	30.05.2016 17:39:20	1108 (0x0454)
    Adapter {02DC10A1-D8A2-4D3C-A798-0AD37A80FBB0} is DHCP enabled. Checking quarantine status.	LocationServices	30.05


    Monday, May 30, 2016 3:10 PM
  • What MP did you specify when creating the media? Was it HTTPS enabled when you created the media or is it now?

    Jason | http://blog.configmgrftw.com | @jasonsandys

    Monday, May 30, 2016 3:27 PM
  • That is the reason

    Config file:      C:\WINDOWS\ccmsetup\MobileClientUnicode.tcf

    Monday, May 30, 2016 3:31 PM