locked
State Migration Point issues - Error 12030 RRS feed

  • Question

  • Hello there,

    I wanted to add a state migration point to a host that already operates as a distribution point for several months. The state migration installs successfully when looking at the msi-log, but is not operational afterwards. The log file states that the health check fails with error 12030. Did I forget something?

    This is the content of the smpmgr.log

    SMS_EXECUTIVE started SMS_STATE_MIGRATION_POINT as thread ID 3376 (0xD30).  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.256-60><thread=3636 (0xE34)>
    ********************************************************************************  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.256-60><thread=3376 (0xD30)>
    SMS_STATE_MIGRATION_POINT received START notification.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.256-60><thread=3376 (0xD30)>
    SMPPeriodicActivityInterval = 1440 minutes.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.256-60><thread=3376 (0xD30)>
    SMPEncryptionCert Length 3008.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.256-60><thread=3376 (0xD30)>
    RegOpenKeyEx succeeded for regkeypath SOFTWARE\MICROSOFT\SMS\SMP\STATESTORE  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.256-60><thread=3376 (0xD30)>
    StateMsgDir = C:\SMS\MP\outboxes\statemsg.box, StatusmsgDir = C:\SMS\MP\outboxes\stat.box, sitecode = PH2  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.256-60><thread=3376 (0xD30)>
    Securing SMP msg dirs successful  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.287-60><thread=3376 (0xD30)>
    HandleSMPRegistryChanges: RegQueryInfoKey succeeded. Number of SMP stores=1   $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.287-60><thread=3376 (0xD30)>
    RegOpenKeyEx succeeded for regkeypath SOFTWARE\MICROSOFT\SMS\SMP\STATESTORE\SMPSTOREE_EAFE6917  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.287-60><thread=3376 (0xD30)>
    Directory E:\StateMigration\SMPSTOREE_EAFE6917$ exists.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.287-60><thread=3376 (0xD30)>
    Creating share SMPSTOREE_EAFE6917$ succeeded  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.287-60><thread=3376 (0xD30)>
    AllowSMPIsapiAccess succeeded for share E:\StateMigration\SMPSTOREE_EAFE6917$.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.287-60><thread=3376 (0xD30)>
    SMPPeriodicActivityInterval = 1440 minutes  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.287-60><thread=3376 (0xD30)>
    Handling SMP registry Changes succeeded.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.287-60><thread=3376 (0xD30)>
    Successfully created factory CSMPMgrFactory  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.303-60><thread=3376 (0xD30)>
    Successfully registered class CSMPMgr.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.303-60><thread=3376 (0xD30)>
    SMS_STATE_MIGRATION_POINT successfully started  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.303-60><thread=3376 (0xD30)>
    Configuration and Availability Monitor thread started.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.303-60><thread=1196 (0x4AC)>
    Initialized 'SMS Server Availability' performance instance => SMS State Migration Point.~  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.303-60><thread=1196 (0x4AC)>
    HandleSMPRegistryChanges: RegQueryInfoKey succeeded. Number of SMP stores=1   $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:14.190-60><thread=1196 (0x4AC)>
    RegOpenKeyEx succeeded for regkeypath SOFTWARE\MICROSOFT\SMS\SMP\STATESTORE\SMPSTOREE_EAFE6917  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:14.190-60><thread=1196 (0x4AC)>
    Directory E:\StateMigration\SMPSTOREE_EAFE6917$ exists.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:14.190-60><thread=1196 (0x4AC)>
    Creating share SMPSTOREE_EAFE6917$ succeeded  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:14.206-60><thread=1196 (0x4AC)>
    AllowSMPIsapiAccess succeeded for share E:\StateMigration\SMPSTOREE_EAFE6917$.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:14.206-60><thread=1196 (0x4AC)>
    SMPPeriodicActivityInterval = 1440 minutes  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:14.206-60><thread=1196 (0x4AC)>
    Handling SMP registry Changes succeeded.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:14.206-60><thread=1196 (0x4AC)>
    SSL is enabled.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
    Client authentication is also enabled.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
    CRL Checking is also enabled.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
    Machine name is 'statemigr.something.com'.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
    Begin validation of Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com'  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
    Certificate has "SSL Client Authentication" capability.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
    Completed validation of Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com'  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
    Begin validation of Certificate [Thumbprint 35633602ebcd8512702330af54bf349adb3b9b0a] issued to 'statemigr.something.com'  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
    Certificate doesn't have "SSL Client Authentication" capabilities.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
    Completed validation of Certificate [Thumbprint 35633602ebcd8512702330af54bf349adb3b9b0a] issued to 'statemigr.something.com'  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
    Skipping this certificate which is not valid for ConfigMgr usage.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
    >>> Selected Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com' for HTTPS Client Authentication  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
    Failed to send http request /SMSSMP/.sms_smp?op=healthcheck. Error 12030  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.314-60><thread=1196 (0x4AC)>
    Call to HttpSendRequestSync failed for port 443 with 12030 error code.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.314-60><thread=1196 (0x4AC)>
    Health check operation failed, error code is 12030  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.314-60><thread=1196 (0x4AC)>
    STATMSG: ID=6208 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_STATE_MIGRATION_POINT" SYS=statemigr.something.com SITE=PH2 PID=2904 TID=1196 GMTDATE=Di Mrz 24 19:29:20.314 2015 ISTR0="12030" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.314-60><thread=1196 (0x4AC)>
    Completed availability check on local machine  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.314-60><thread=1196 (0x4AC)>
    Initialization still in progress.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.314-60><thread=1196 (0x4AC)>
    SSL is enabled.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
    Client authentication is also enabled.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
    CRL Checking is also enabled.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
    Machine name is 'statemigr.something.com'.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
    Begin validation of Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com'  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
    Certificate has "SSL Client Authentication" capability.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
    Completed validation of Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com'  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
    Begin validation of Certificate [Thumbprint 35633602ebcd8512702330af54bf349adb3b9b0a] issued to 'statemigr.something.com'  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
    Certificate doesn't have "SSL Client Authentication" capabilities.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
    Completed validation of Certificate [Thumbprint 35633602ebcd8512702330af54bf349adb3b9b0a] issued to 'statemigr.something.com'  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
    Skipping this certificate which is not valid for ConfigMgr usage.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
    >>> Selected Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com' for HTTPS Client Authentication  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
    Failed to send http request /SMSSMP/.sms_smp?op=healthcheck. Error 12030  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
    Call to HttpSendRequestSync failed for port 443 with 12030 error code.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
    Health check operation failed, error code is 12030  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
    Completed availability check on local machine  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
    Initialization still in progress.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
    SSL is enabled.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
    Client authentication is also enabled.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
    CRL Checking is also enabled.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
    Machine name is 'statemigr.something.com'.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
    Begin validation of Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com'  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
    Certificate has "SSL Client Authentication" capability.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
    Completed validation of Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com'  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
    Begin validation of Certificate [Thumbprint 35633602ebcd8512702330af54bf349adb3b9b0a] issued to 'statemigr.something.com'  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
    Certificate doesn't have "SSL Client Authentication" capabilities.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
    Completed validation of Certificate [Thumbprint 35633602ebcd8512702330af54bf349adb3b9b0a] issued to 'statemigr.something.com'  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
    Skipping this certificate which is not valid for ConfigMgr usage.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
    >>> Selected Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com' for HTTPS Client Authentication  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
    Failed to send http request /SMSSMP/.sms_smp?op=healthcheck. Error 12030  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
    Call to HttpSendRequestSync failed for port 443 with 12030 error code.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
    Health check operation failed, error code is 12030  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
    Completed availability check on local machine  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.305-60><thread=1196 (0x4AC)>
    Initialization still in progress.  $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.305-60><thread=1196 (0x4AC)>

    Tuesday, March 24, 2015 7:37 PM

Answers

  • I moved the state migration point to another, separate server now. There the smp seems to be running smoothly. Do you have an idea what could cause the mentioned error?

    The problematic server where the smp has been before has two ip addresses and separete certificates for client and server authentication. Could the problem have it's cause there?

    • Proposed as answer by Daniel JiSun Wednesday, April 1, 2015 9:39 AM
    • Marked as answer by Daniel JiSun Thursday, April 9, 2015 7:21 AM
    Wednesday, March 25, 2015 10:29 AM

All replies

  • Seems as if there's a certificate related problem: Certificate doesn't have "SSL Client Authentication" capabilities

    Certificate requirements are listed here: https://technet.microsoft.com/en-us/library/gg699362.aspx


    Torsten Meringer | http://www.mssccmfaq.de

    Tuesday, March 24, 2015 8:08 PM
  • The server has two certificates, one with client auth and one with server auth capabilities. As you can see in the log, the certificate with the server auth capability is ignored and the client auth is succesfully selected:

    >>> Selected Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com' for HTTPS Client Authentication  $$<SMS_STATE_MIGRATION_POINT>

    This client certificate has been (and still is) working for client authentication of the distribution point on the same server for months.

    Tuesday, March 24, 2015 8:29 PM
  • What's recorded in the IIS logfiles then?

    Torsten Meringer | http://www.mssccmfaq.de

    Tuesday, March 24, 2015 8:53 PM
  • There is neither information in the W3SVC1 nor in the HTTPERR-folder about the SMP. The test calls from the health-check are not logged as well.
    Wednesday, March 25, 2015 8:57 AM
  • I moved the state migration point to another, separate server now. There the smp seems to be running smoothly. Do you have an idea what could cause the mentioned error?

    The problematic server where the smp has been before has two ip addresses and separete certificates for client and server authentication. Could the problem have it's cause there?

    • Proposed as answer by Daniel JiSun Wednesday, April 1, 2015 9:39 AM
    • Marked as answer by Daniel JiSun Thursday, April 9, 2015 7:21 AM
    Wednesday, March 25, 2015 10:29 AM
  • Hello,

    12030  The connection with the server was terminated abnormally

    This indicate a network issue, so I think two IP addreses might be a problem. But it is not known for sure. Capture  network package may give us some clue, if it worth doing this.


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, April 1, 2015 9:39 AM
  • Could you please explain why multiple IP addresses would cause a problem on the distribution point / state migration point?
    Wednesday, April 1, 2015 3:39 PM
  • Hi,

    That is why I suggested to run netmon to do a network traffic capture.


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, April 9, 2015 7:20 AM