failed to get client certificate for transportation error 0x87d00215 failed to get client certificate for transportation error 0x87d00215

Retry time: 10 minute(s)ccmsetup01/03/2019 16:38:072612 (0x0A34) [WINDOWS10X64] Running on 'Microsoft Windows 10 Enterprise 2016 LTSB' ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) I had to remove the machine from the domain Before doing that . I must be doing something wrong as I can't get the client to connect to a server using Let's encrypt (ACME) certificates. ', Based on Certificate Issuer 'domainname Enterprise Root 01i002' found Certificate [Thumbprint 501B122B1272AD18F74C7766498428CCE2B0B524] issued to 'PTW01CISWB001. There are no certificates in the 'MY' store. RegTask: Failed to get certificate. Have already tried all MPs. Folder 'Microsoft\Microsoft\Configuration Manager' not found. Level 9, 440 Collins Street Melbourne, VIC 3000ABN: 47 420 502 955, document.write(new Date().getFullYear()); Endpoint Focus Trust. Client re-install error Unable to find any Certificate based on Certificate Issuers Failed to get client certificate for transportation. No MPs were specified from commandline or the mobileclient.tcf. If I use a Client certificate instead, the PFX I used to create the CMG, it has a failure on two steps. Seems like you're assuming too much. Verify that IIS base components are installed on the local Configuration Manager Site Server, and IIS Web Services are installed on the Distribution Point Server. These are the errors I am getting. Sorry to bother you with that. 2,Please make sure you have added the boundary to your boundary groups and associated your DPs and MPs to the boundary groups. CCMFIRSTCERT (Tells SCCM to use the certificate with the longest validity period). I did. Error 0x87d00215ccmsetup01/03/2019 16:38:072612 (0x0A34) ccmsetup By clicking Sign up for GitHub, you agree to our terms of service and Start machine policy retrieval in configuration manager client control, WUserver is pointing in the sccm SUP and i have run the machine policy retrieval. installed. Retrieved 0 MP records from AD for site '001' ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) CCMCERTISSUERS: CN=SCCM-Server-Dan.cork.localccmsetup01/03/2019 16:38:072612 (0x0A34) We wont share your details but you can read more in our Privacy Policy. OS is not Win10RS3+, ENDOK. Source \\WINSCCM.TESTLAB.COM\SMSClient is inaccessible (67) ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Years ago, we had put an IIS redirect to direct users to a "prettier" CNAME for the Application Catalog's URL.Once we removed the Application Catalog roles in favor of using only Software Center, we removed the IIS redirect and our CMG started working great. Use it. MEM clients go offline after Altiris / Symantec Management Agent get uninstalled Defaulting to state of 63. MANAGEDINSTALLER: 0ccmsetup01/03/2019 16:38:072612 (0x0A34) Can anyone explain each one to me? dism.exe /online /norestart /enable-feature /ignorecheck /featurename:"IIS-WebServerRole" /featurename:"IIS-WebServer" /featurename:"IIS-CommonHttpFeatures" /featurename:"IIS-StaticContent" /featurename:"IIS-DefaultDocument" /featurename:"IIS-DirectoryBrowsing" /featurename:"IIS-HttpErrors" /featurename:"IIS-HttpRedirect" /featurename:"IIS-WebServerManagementTools" /featurename:"IIS-IIS6ManagementCompatibility" /featurename:"IIS-Metabase" /featurename:"IIS-WindowsAuthentication" /featurename:"IIS-WMICompatibility" /featurename:"IIS-ISAPIExtensions" /featurename:"IIS-ManagementScriptingTools" /featurename:"MSRDC-Infrastructure" /featurename:"IIS-ManagementService". ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) ccmsetup ', Begin validation of Certificate [Thumbprint C5CC8BED3777E7CE200257275E3F63E537D84ECA] issued to 'PTW01CISWB001. NoMaintenance Windows on the device collection? Join the conversation. (0x0C94) Updated security on object C:\Windows\ccmsetup\cache\. SOLVED FAILED TO GET TARGETED UPDATE ERROR = 0X87D00215. Hope everything goes well. SOLVED FAILED TO GET TARGETED UPDATE ERROR = 0X87D00215. Please remember to mark the replies as answers if they help. State message with TopicType 800 and TopicId {ADEBF393-E5B7-487D-80B8-96EB1AFB7D59} has been sent to the FSPFSPStateMessage01/03/2019 16:38:072612 (0x0A34) Error 0x87d00282 "go to client computer communication and set the "Action to take if multiple certificates match criteria" to "Select the certificate with the longest validity period", has been set, a long time ago, I also tried turning it off for a few hours and back on, no difference. After installing 1806 and configuring certificates, I started having issues with installing clients. The SCCM client installation fails with below error shown in ccmsetup.log file. MapNLMCostDataToCCMCost() returning Cost 0x1 ) Detected 33121 MB free disk space on system drive. And what are the pros and cons vs cloud based? Error 0x8004100e. If you go to this location in the SCCM Console: Administration\Overview\Site Configuration\Sites. Folder 'Microsoft\Microsoft\Configuration Manager' not found. IsSslClientAuthEnabled - Determining provisioning mode state failed with 80070002. I have got below message in target system: Begin to select client certificate ccmsetup 6/15/2017 12:24:47 Let me know :), i attach the sample screenshot i see in updatedeployment.log file, Sep 16 2020 We are not in a write The below command line was used for the client installation. Have a nice day! Version="1" />'ccmsetup01/03/2019 None ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) filter maintenance mode. Sharing best practices for building any app with .NET. 16:38:072612 (0x0A34) ccmsetup01/03/2019 16:38:072612 (0x0A34) Check if IP Subnet / AD Site is associated with any boundary group. Please find the below Prajwal Desai link to upgrade SCCM 1810. https://www.prajwaldesai.com/sccm-1810-upgrade-guide - Maybe helpful. Thanks @iamqizhao. Folder 'Microsoft\Microsoft\Configuration Manager' not found. On the status in monitoring window of the SCCM console, the Distribution point says that i have successfully distributed content on the remote DP but there is an error saying Failed to create virtual directory? Error 0x87d00215 MapNLMCostDataToCCMCost() returning Cost 0x1ccmsetup01/03/2019 16:38:072612 (0x0A34) Task does Jason | https://home.configmgrftw.com | @jasonsandys. and highlight your SCCM server then right click and choose "Client Installation Settings" > Client Push Installation and click on the tab called Installation Properties you can add the MP server and site code in there. Sep 16 2020 If you have an account, sign in now to post with your account. ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) GetDirectoryList failed with a non-recoverable failure, 0x87d00454 ) Error 0x8004100e ccmsetup 6/15/2017 9:50:24 PM 4140 (0x102C) ", The step "Testing the CMG channel for management point: 'thenameoftheMP'" gives me a new error, "Failed to refresh MP location. I am not an expert here. Failed to get client certificate for transportation. You need to hear this. Failed to get CMG service metadata. SiteVersion: 5.00.8740.1002ccmsetup01/03/2019 16:38:072612 (0x0A34) Oct 01 2020 Friday, February 1, 2019 1:51 PM 0 Failed to find DP locations from MP 'HTTPS://winsccm.testlab.com Opens a new window' with error 0x87d00280, status code 200. ccmsetup01/03/2019 16:38:072612 (0x0A34) You are using an out of date browser. https://social.technet.microsoft.com/Forums/en-US/f660d3c6-72a6-4ad6-80e3-2b6a5583341a/clients-not-r Re: SCCM Software Updates not installing to endpoints, Site and site system prerequisites for Configuration Manager. CcmSetup failed with error code 0x80004004 ccmsetup 6/15/2017 9:50:24 PM 4140 (0x102C) ', Completed validation of Certificate [Thumbprint B2400DEC508EBAACE84613AE21A33F4F59683BD0] issued to 'PTW01CISWB001. (0x0C94) Task does not exist. Aug 12 2019 Error 0x87d00215. Manually creating this registry key works and the client is now able to communicate with the MP. As of 29th Jan 2019. Find out more about the Microsoft MVP Award Program. Please find the below Prajwal Desai link to upgrade SCCM 1810. Command line parameters for ccmsetup have been specified. Running as user "SYSTEM" ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Ccmsetup command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice /ignoreskipupgrade /config:MobileClient.tcfccmsetup01/03/2019 16:38:072612 (0x0A34) Did you try the suggestion in that thread including settingCCMFIRSTCERT=1 CCMCERTSTORE=MY? Updating MDM_ConfigSetting.ClientDeploymentErrorCode with value 0ccmsetup01/03/2019 16:38:072612 (0x0A34) 2,Please make sure you have added the boundary to your boundary groups and associated your DPs and MPs to the boundary groups. Distribution Manager also requires that IIS Web Services be installed on the Distribution Point Server that needs to support Background Intelligent Transfer Service (BITS)? Finding certificate by issuer chain returned error 80092004ccmsetup01/03/2019 16:38:072612 (0x0A34) Sending Fallback Status Point message to 'SCCM-Server-Dan.cork.local', STATEID='101'. ccmsetup 6/15/2017 12:24:47 AM 2680 (0x0A78) I had also faced issue in upgrading SCCM Site server from 1806 to 1810 but not the same error which you received , however I checked above 2 log files and got the root cause. Persisted AAD on-boarding info. Client is on internetccmsetup01/03/2019 16:38:072612 (0x0A34) Ccmsetup is being restarted due to an administrative action. SslState value: 224ccmsetup01/03/2019 16:38:072612 (0x0A34) ==========[ ccmsetup started in process 288 ]========== ccmsetup 6/15/2017 9:50:35 PM 2320 (0x0910) Can you verifythat SCCM site server computer account are in the Local Administrators group on the server where DP role is to be installed? 6/15/2017 12:24:47 AM 2680 (0x0A78) ', Begin validation of Certificate [Thumbprint BC0B3996CCDBED300F78A7A9A1EEFC32BCEA8EAE] issued to 'PTW01CISWB001. Folder 'Microsoft\Microsoft\Configuration Manager' not found. Performing AD query: '(&(ObjectCategory=mSSMSManagementPoint)(mSSMSDefaultMP=TRUE)(mSSMSSiteCode=101))'ccmsetup01/03/2019 16:38:072612 (0x0A34) Task does ccmsetup01/03/2019 16:38:072612 (0x0A34) Successfully deleted task 'Configuration Manager Client Retry Task'ccmsetup01/03/2019 16:38:072612 (0x0A34) I haven't seen real example of using TLS so I am not entirely sure I am doing the right thing. For example we have one SCCM 2012 that just does Windows 7 PCs and we built another one that will just be doing Windows 10. Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. Shutdown has been requested ccmsetup 6/15/2017 9:50:24 PM 4244 (0x1094) For more information, see SmsAdminUI.log. The same settings worked for windows 10 machine but I am not sure why this is not working for windows 7 system. ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Params to send '5.0.8412.1004 Deployment Error: 0x0, ' ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) The Select First Certificate registry entry was set to OFF so a certificate cannot be selected. 04:25 AM, That's correct. 6/15/2017 12:24:47 AM 2680 (0x0A78) MapNLMCostDataToCCMCost() returning Cost 0x1ccmsetup01/03/2019 16:38:072612 (0x0A34) I know the certificate is valid, verified by running a simple Go http server: I couldn't really find any doc showing how to setup the client properly apart from https://chromium.googlesource.com/external/github.com/grpc/grpc-go/+show/refs/heads/master/Documentation/grpc-auth-support.md. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register. When I push client installation I received below logs: ccmsetup is shutting down ccmsetup 6/15/2017 9:50:20 PM 4140 (0x102C) Failed to correctly receive a WEBDAV HTTPS request.. (StatusCode at WinHttpQueryHeaders: 0) and StatusText: '' ) ConfigMgrAdminUISetupVerbose.log ? 0x8004100e CCMPKICERTOPTIONS: 1ccmsetup01/03/2019 16:38:072612 (0x0A34) The 'Certificate Selection Criteria' was not specified, counting number Possible cause can be the distribution Manager requires that IIS base components be installed on the local Configuration Manager Site Server in order to create the virtual directory. Error 0x87d00215 OperationalXml '5.00.8740.1002636380443CN=SCCM-Server-Dan.cork.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lso I do have different site codes and I made sure site assigment was not set in the boundaries. FromAD: command line = SMSSITECODE=101 CCMFIRSTCERT=1 CCMCERTSTORE=MYccmsetup01/03/2019 16:38:072612 (0x0A34) I'm excited to be here, and hope to be able to contribute. SslState value: 224 ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Unable to find any Certificate based on Certificate Issuersccmsetup01/03/2019 16:38:072612 (0x0A34) Check if certificate chain for the client certificate is specified to upload to the CMG service and check revocation check setting.". 0x87d00215, it means "Item not found". MPs: ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) I can only think that it is something i have left out my setup or not installed in my environment. Unable to find any Certificate based on Certificate Issuersccmsetup01/03/2019 16:38:072612 (0x0A34) There are at least 2 certificates valid for ConfigMgr usage that meet the selection criteria. ccmsetup Finding certificate by issuer chain returned error 80092004ccmsetup01/03/2019 16:38:072612 (0x0A34) Shutdown has been requested ccmsetup 6/15/2017 9:50:24 PM 4244 (0x1094) ', Based on Certificate Issuer 'domainname Enterprise Root 01i001' found Certificate [Thumbprint 4E67BDA515464DE0C651562D0ABBAE688F7B7510] issued to 'PTW01CISWB001. A possible reason for this failure is the CMG connection point failed to forward the message to the management point. ', Begin validation of Certificate [Thumbprint 259ECEA46C3DAC33F0B5838C5B82E36B1BD872E3] issued to 'ptw01ciswb001. The tlsConfig is initialised exactly the same for grpc, the certificate is returned using the GetCertificate method of *tls.Config. ccmsetup01/03/2019 16:38:072612 (0x0A34) I have created sample windows 10 update and deploy that to my testing collection. privacy statement. There are no certificates in the 'MY' store. Aug 12 2019 Current AD forest name is cork.local, domain name is cork.localccmsetup01/03/2019 16:38:072612 (0x0A34) Client is set to use webproxy if available. ccmsetup01/03/2019 16:38:072612 (0x0A34) CCMHTTPSPORT="443" CCMHTTPSSTATE="192" CCMFIRSTCERT="1" ccmsetup ', Begin validation of Certificate [Thumbprint E570B76528BE092F69297AEFB668FDC80DD28CBB] issued to 'PTW01CISWB001. Everything looks good at that front. ccmsetup01/03/2019 16:38:072612 (0x0A34) Thanks for your time. My MP and SUP are on the same server. Error: Conn.resetTransport failed to create client transport: connection error: desc = "transport: x509: certificate signed by unknown authority". and it is saying that the client computer is compliant. Failed to get directory list from 'HTTPS://site server name/CCM_Client'. Source List: ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) not exist. ', Begin validation of Certificate [Thumbprint 501B122B1272AD18F74C7766498428CCE2B0B524] issued to 'PTW01CISWB001. Downloading file ccmsetup.cab ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Failed to read assigned site code from registry. If there is any other assistance we can provide, please feel free to let us know, we will do our best to help you. LocationServices 8/9/2019 11:00:29 AM 212 (0x00D4). Error: 0x87d00215 Begin searching client certificates based on Certificate Issuers Certificate Issuer 1 [CN=domainname Root CA; OU=IS; O=domainname Co., Inc.; L=Richfield; S=MN; C=US] Certificate Issuer 2 [CN=domainname Enterprise Root 01i001] ccmsetup01/03/2019 16:38:072612 (0x0A34) 6/15/2017 12:24:47 AM 2680 (0x0A78) Folder 'Microsoft\Microsoft\Configuration Manager' not found. 02:27 PM. I have since tried the suggestion above setting: SMSSITECODE=101 CCMFIRSTCERT=1 CCMCERTSTORE=MY, Running on platform X64ccmsetup01/03/2019 16:38:071124 (0x0464) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCM\Security\Select First Certificate = 1. If I use a Client certificate instead, the PFX I used to create the CMG, it has a failure on two steps. 9:50:35 PM 3220 (0x0C94) Product Type = 18 (0x0C94) Source List:ccmsetup01/03/2019 16:38:072612 (0x0A34) A Fallback Status Point has not been specified and no client was Looking at the logs I can see that the switches have been accepted and the client should be doing the right thing, but unfortunately, it still presents the same errors. [CCMHTTP] ERROR INFO: StatusCode=200 StatusText=ccmsetup01/03/2019 16:38:072612 (0x0A34) Task does not exist. Thank you for your message. Any ideas on where I messed up? MSI log file: C:\Windows\ccmsetup\Logs\client.msi.logccmsetup01/03/2019 16:38:072612 (0x0A34) No version of the client is currently detected. SOLVED Application installing but failing on any detection method added, uninstall works fine with no errors not exist. Ccmsetup is being restarted due to an administrative action. FSP="SCCM-SERVER-DAN.CORK.LOCAL" INSTALL="ALL" MANAGEDINSTALLER="0" SMSSITECODE="101" smsmplist="HTTPS://SCCM-Server-Dan.cork.local"ccmsetup01/03/2019 16:38:072612 (0x0A34) Find out more about the Microsoft MVP Award Program. It is obvious that later versions/fixes of configuration manager have not solved this problem. @alexandertuvstromIIS is *NOT* required on the site server, unless that site server itself hosts one of the roles that require IIS (such as the MP, DP or SUP role). ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0) ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)CcmSetup failed with error code 0x80004005 ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0). It is unclear if the problem is 1806 related or just a one-off for this client. Failed to get DP locations as the expected version from MP 'http://server1.techuisitive.com'. The MP name retrieved is 'SCCM-Server-Dan.cork.local' with version '8740' and capabilities ''ccmsetup01/03/2019 ccmsetup01/03/2019 16:38:072612 (0x0A34) Begin checking Alternate Network ConfigurationLocationServices01/03/2019 16:38:072612 (0x0A34) CcmSetup failed with error code 0x87d00454, Configuration Manager (Current Branch) Site and Client Deployment. Your certificate does not contain a FQDN: Completed validation of Certificate [Thumbprint 259ECEA46C3DAC33F0B5838C5B82E36B1BD872E3] issued to 'ptw01ciswb001.-> Domain XXX.XXX', Unable to find any Certificate based on Certificate Issuers, Configuration Manager (Current Branch) Site and Client Deployment, Begin searching client certificates based on Certificate Issuers, Certificate Issuer 1 [CN=domainname Root CA; OU=IS; O=domainname Co., Inc.; L=Richfield; S=MN; C=US], Certificate Issuer 2 [CN=domainname Enterprise Root 01i001], Certificate Issuer 3 [CN=domainname Enterprise Root 01i002; O=domainname Inc.; L=Richfield; S=Minnesota; C=US], Based on Certificate Issuer 'domainname Enterprise Root 01i002' found Certificate [Thumbprint E570B76528BE092F69297AEFB668FDC80DD28CBB] issued to 'PTW01CISWB001. Already on GitHub? Error 0x8004100e ccmsetup 6/15/2017 12:24:47 AM 4480 (0x1180) Does my CMG connection point need to be Azure AD Hybrid Joined in order to use Azure AD for client authentication? force to run a cycle from the client workstation and it will say compliant. I might be wrong. No version of the client is currently detected. Yes server has full control in system management container. ', Begin validation of Certificate [Thumbprint 6F72447F3B4EBC63F25AAB9023986F3F3FC22975] issued to 'PTW01CISWB001. CCMHTTPPORT: 80 ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) PM 3220 (0x0C94) I decided to let MS install the 22H2 build. Still having a problem with this after upgrading SCCM Manager to 1810. ccmsetup 6/15/2017 9:50:35 PM 3220 ccmsetup.exe /SMSSITECODE = P01 Cause: The above error indicates that a new version of client installation source was required. Launch from folder C:\Windows\ccmsetup\ccmsetup01/03/2019 16:38:071124 (0x0464) (10.0.14393). MPs:ccmsetup01/03/2019 16:38:072612 (0x0A34) group on the server where DP role is to be installed? There was an error trying to send your message. Thanks everyone now client has been installed on windows 10 machine but I am unable to install sccm client on windows 7 machine. Sending location request to 'SCCM-Server-Dan.cork.local' with payload ' GetSSLCertificateContext failed with error 0x87d00280 ccmsetup /config:MobileClient.tcf ccmsetup 6/15/2017 9:50:35 PM 3220 Ccmsetup command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice Resolved. The 'Select First Certificate' registry entry was set to OFF so a certificate cannot be selected. Error 0x87d00281" from around when I powered on the workstation. The management point returned the following error: 'Unauthorized'. I am trying to push the client to the server that is hosting my SCCM. Did you setup your boundaries? I have it worked before, but now nothing work, including windows 10 and 7. CCMFIRSTCERT: 1ccmsetup01/03/2019 16:38:072612 (0x0A34) Error: 0x87d00215, Torsten Meringer | http://www.mssccmfaq.de. Have not solved what problem? 3. Defaulting to state of 63.ccmsetup01/03/2019 16:38:072612 (0x0A34) Failed to get client certificate for transportation. If it's Windows 11 22H2, please upgrade to the latest SCCM version 2207 or 2211 to have a try. Failed to get DP locations as the expected version from MP 'HTTPS://winsccm.testlab.com' Opens a new window. Updated security on object C:\Windows\ccmsetup\cache\. IsSslClientAuthEnabled - Determining provisioning mode state failed with 80070002. 12:24:47 AM 2680 (0x0A78) Checking Write Filter Status. ccmsetup01/03/2019 16:38:072612 (0x0A34) GetDPLocations failed with error 0x87d00280 ccmsetup 6/15/2017 12:24:47 AM 2680 (0x0A78) Is only one https client or all the client has this issue? Command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice /ignoreskipupgrade /config:MobileClient.tcfccmsetup01/03/2019 16:38:072612 (0x0A34) ', Completed validation of Certificate [Thumbprint 501B122B1272AD18F74C7766498428CCE2B0B524] issued to 'PTW01CISWB001.