locked
SCCM 2012 SP1 and Internet-based client deployment to a workgroup RRS feed

  • Question

  • Hey all,

    I'm starting to go around in circles on this one...

    Installing SCCM 2012 SP1 client on an internet based workgroup computer with the following:

    ccmsetup.exe /usePKICert /NOCRLCheck /mp:https://labcms2012v01.sccmlab.corp SMSSITECODE=LAB CCMHOSTNAME=labcms2012v01.sccmlab.corp CCMALWAYSINF=1

    (on the workstation I have just added the above hostname in the hosts file so it resolves correctly)

    The results of the attempted install are in the below log:

    ***************************************************************************

    Running as user "SYSTEM" ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    Detected 24859 MB free disk space on system drive. ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    Checking Write Filter Status. ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    This is not a supported write filter device. We are not in a write filter maintenance mode. ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    Wmi repository check passed. ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    Waiting for existing instances of ccmsetup to exit. ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    All other instances of ccmsetup have completed. ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    Unexpected row count (0) retrieved from AD. ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    Failed to get site version from AD with error 0x80004005 ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    Sending message header '<Msg SchemaVersion="1.1"><ID>{9ECF128E-0B1C-48FE-A3BE-32F9A3755035}</ID><SourceHost>APBTEST</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:APBTEST:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>https://labcms2012v01.sccmlab.corp</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2012-10-26T04:25:20Z</SentTime><Body Type="ByteRange" Offset="0" Length="186"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>' ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    CCM_POST 'https://labcms2012v01.sccmlab.corp/ccm_system/request' ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    Begin searching client certificates based on Certificate Issuers ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    Completed searching client certificates based on Certificate Issuers ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    Begin to select client certificate ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'. ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    2 certificate(s) found in the 'MY' certificate store. ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    The 'MY' of 'Local Computer' store has 2 certificate(s). Using custom selection criteria based on the machine name. ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    Machine name is 'apbtest'. ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    There are no certificate(s) that meet the criteria. ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    Performing search that includes SAN2 extensions... ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    Certificate [Thumbprint E0241D2EAB76E5BA232336367E4FA8BD509D36E0] doesn't have SAN2 extension. ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    Certificate [Thumbprint 49CDFF7E331CB7B2D3441C63F7290683BE0ECAB2] doesn't have SAN2 extension. ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    Using custom selection criteria based on the machine NetBIOS name. ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    Machine name is 'APBTEST'. ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    Begin validation of Certificate [Thumbprint 49CDFF7E331CB7B2D3441C63F7290683BE0ECAB2] issued to 'APBTEST' ccmsetup 26/10/2012 2:25:20 PM 228 (0x00E4)
    The Certificate [Thumbprint 49CDFF7E331CB7B2D3441C63F7290683BE0ECAB2] issued to 'APBTEST' has 'Client Authentication' capability. ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    Completed validation of Certificate [Thumbprint 49CDFF7E331CB7B2D3441C63F7290683BE0ECAB2] issued to 'APBTEST' ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    >>> Client selected the PKI Certificate [Thumbprint 49CDFF7E331CB7B2D3441C63F7290683BE0ECAB2] issued to 'APBTEST' ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    [CCMSETUP] AsyncCallback(): ----------------------------------------------------------------- ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    [CCMSETUP] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    [CCMSETUP]                : dwStatusInformationLength is 4
     ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    [CCMSETUP]                : *lpvStatusInformation is 0x8
     ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    [CCMSETUP]            : WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set
     ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    [CCMSETUP] AsyncCallback(): ----------------------------------------------------------------- ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    Failed to get site version from MP 'https://labcms2012v01.sccmlab.corp' with error 0x80072f8f ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    SiteCode:         LAB ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    SiteVersion:       ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    Ccmsetup is being restarted due to an administrative action. Installation files will be reset and downloaded again. ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    Only one MP https://labcms2012v01.sccmlab.corp is specified. Use it. ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    Searching for DP locations from MP(s)... ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    Unable to retrieve AD site membership LocationServices 26/10/2012 2:25:21 PM 228 (0x00E4)
    Local machine is not a member of an AD domain LocationServices 26/10/2012 2:25:21 PM 228 (0x00E4)
    DhcpGetOriginalSubnetMask entry point not supported. LocationServices 26/10/2012 2:25:21 PM 228 (0x00E4)
    Begin checking Alternate Network Configuration LocationServices 26/10/2012 2:25:21 PM 228 (0x00E4)
    Finished checking Alternate Network Configuration LocationServices 26/10/2012 2:25:21 PM 228 (0x00E4)
    Adapter {074A315B-AA12-4634-81B5-0F3F497DA7E4} is DHCP enabled. Checking quarantine status. LocationServices 26/10/2012 2:25:21 PM 228 (0x00E4)
    Sending message body '<ContentLocationRequest SchemaVersion="1.00">
      <AssignedSite SiteCode="LAB"/>
      <ClientPackage/>
      <ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0" UseInternetDP="0">
        <ADSite Name=""/>
        <Forest Name=""/>
        <Domain Name=""/>
        <IPAddresses>
    < IPAddress SubnetAddress="172.16.1.0" Address="172.16.1.131"/>
        </IPAddresses>
      </ClientLocationInfo>
    < /ContentLocationRequest>
    ' ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    Sending message header '<Msg SchemaVersion="1.1"><ID>{8432246B-EB64-4626-B31C-FE444CCA6F92}</ID><SourceHost>APBTEST</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:APBTEST:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>https://labcms2012v01.sccmlab.corp</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2012-10-26T04:25:21Z</SentTime><Body Type="ByteRange" Offset="0" Length="1030"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>' ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    CCM_POST 'https://labcms2012v01.sccmlab.corp/ccm_system/request' ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    [CCMSETUP] AsyncCallback(): ----------------------------------------------------------------- ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    [CCMSETUP] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    [CCMSETUP]                : dwStatusInformationLength is 4
     ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    [CCMSETUP]                : *lpvStatusInformation is 0x8
     ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    [CCMSETUP]            : WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set
     ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    [CCMSETUP] AsyncCallback(): ----------------------------------------------------------------- ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    GetDPLocations failed with error 0x80072f8f ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    Failed to get DP locations as the expected version from MP 'https://labcms2012v01.sccmlab.corp'. Error 0x80072f8f ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    A Fallback Status Point has not been specified.  Message with STATEID='101' will not be sent. ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)
    Next retry in 10 minute(s)... ccmsetup 26/10/2012 2:25:21 PM 228 (0x00E4)

    ********************************************************************

    Admittedly I am no expert when it comes to PKI infrastructure so I wouldn't be surprised (and I am kinda hoping) that I have just made a silly error..

    Cheers'

    Dan

    Monday, October 29, 2012 6:01 AM

All replies