6/15/2017 9:50:35 PM 3220 (0x0C94) For more information, see SmsAdminUI.log. If I use the Cloud management Gateway connection analyzer with an Azure AD user sign in, it fails on the "Testing the CMG channel for management point: 'thenameoftheMP'" step with the following error: Failed to get ConfigMgr token with Azure AD token. Our community has been around for many years and pride ourselves on offering unbiased, critical discussion among people of all different backgrounds. Client OS Version 6.2 Service Pack 0.0ccmsetup01/03/2019 16:38:072612 (0x0A34) 6/15/2017 12:24:47 AM 2680 (0x0A78) and highlight your SCCM server then right click and choose "Client Installation Settings" > Client Push Installation and click on the tab called Installation Properties you can add the MP server and site code in there. GET 'HTTPS://winsccm.testlab.com/CCM_Client/ccmsetup.cab Opens a new window' If it's an ip range, make sure it falls within the range. We are working every day to make sure our community is one of the best. Looking at registry settings from other clients that use HTTPS and are working I can see the following Dword. ==========[ ccmsetup started in process 288 ]========== ccmsetup 6/15/2017 9:50:35 PM 2320 (0x0910) 16:38:072612 (0x0A34) I had installed adminconsole.msi which was failed during installation. MSI properties: INSTALL="ALL" SMSSITECODE="001" CCMHTTPPORT="80" I would try adding the client IP Subnet to your boundary list and then maybe the client will see the "source" to download all of the files it needs. CcmSetup failed with error code 0x87d00280 ccmsetup 6/15/2017 12:24:47 AM 4480 (0x1180), Looks like an issue with using https for your client communication verify your clinet has the correct certs. There are no certificates in the 'MY' store. 0x87d00215, it means "Item not found". Sorry for taking so long to get back. This is not a supported write filter device. CCMCERTSTORE: MYccmsetup01/03/2019 16:38:072612 (0x0A34) Is only one https client or all the client has this issue? By clicking Sign up for GitHub, you agree to our terms of service and If I use a Client certificate instead, the PFX I used to create the CMG, it has a failure on two steps. We are not in a write I haven't seen real example of using TLS so I am not entirely sure I am doing the right thing. Error 0x87d00280 ccmsetup 6/15/2017 12:24:47 AM 2680 (0x0A78) You are using an out of date browser. :). ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Error: Conn.resetTransport failed to create client transport: connection error: desc = "transport: x509: certificate signed by unknown authority" I know the certificate is valid, verified by running a simple Go http server: If it's Windows 11 22H2, please upgrade to the latest SCCM version 2207 or 2211 to have a try. RegTask: Failed to get certificate. ccmsetup 6/15/2017 SslState value: 224 ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) I must be doing something wrong as I can't get the client to connect to a server using Let's encrypt (ACME) certificates. Let me know :), i attach the sample screenshot i see in updatedeployment.log file, Sep 16 2020 0x8004100e Accessing the URL 'HTTPS://site server name/CCM_Client/ccmsetup.cab' failed with 80004005 Task does Defaulting to state of 63. Bonus Flashback: March 3, 1969: Apollo 9 launched (Read more HERE.) MANAGEDINSTALLER: 0ccmsetup01/03/2019 16:38:072612 (0x0A34) Certificate Issuer 1 [CN=SCCM-Server-Dan.cork.local]ccmsetup01/03/2019 16:38:072612 (0x0A34) Thank you for your message. Error 0x8004100e ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) I added a "LocalAdmin" -- but didn't set the type to admin. [] Params to send '5.0.8740.1024 Deployment Error: 0x0, 'ccmsetup01/03/2019 16:38:072612 (0x0A34) However, we had an error in some of the logs, that we couldn't really pinpoint Failed to get AAD token. ccmsetup ccmsetup.exe /SMSSITECODE = P01 Cause: The above error indicates that a new version of client installation source was required. The text was updated successfully, but these errors were encountered: This is not an grpc issue. CMPInfoFromADCache requests are throttled for 00:59:59ccmsetup01/03/2019 16:38:072612 (0x0A34) Source List:ccmsetup01/03/2019 16:38:072612 (0x0A34) Error: Conn.resetTransport failed to create client transport: connection error: desc = "transport: x509: certificate signed by unknown authority". CCMHTTPSPORT: 443 ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Apr 11 2023 08:00 AM - Apr 12 2023 11:00 AM (PDT), Cloud Management Gateway for Azure AD Hybrid Joined Windows 10 Workstations, Microsoft Intune and Configuration Manager, https://docs.microsoft.com/en-us/sccm/core/clients/manage/cmg/setup-cloud-management-gateway, Re: Cloud Management Gateway for Azure AD Hybrid Joined Windows 10 Workstations. 1. Client is set to use webproxy if available. ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0) ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)CcmSetup failed with error code 0x80004005 ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0). So, first interaction here, so if more is needed, or if I am doing something wrong, I am open to suggestions or guidance with forum ettiquette. The tlsConfig is initialised exactly the same for grpc, the certificate is returned using the GetCertificate method of *tls.Config. 12:24:47 AM 2680 (0x0A78) Used GPO to import certs back. Begin checking Alternate Network ConfigurationLocationServices01/03/2019 16:38:072612 (0x0A34) Sending Fallback Status Point message to 'SCCM-Server-Dan.cork.local', STATEID='100'. The same settings worked for windows 10 machine but I am not sure why this is not working for windows 7 system. ccmsetup 6/15/2017 12:24:47 AM 2680 (0x0A78) I did. Client OS Version 6.2 Service Pack 0.0 ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Task does ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support. Begin to select client certificate ccmsetup 6/15/2017 12:24:47 AM StatusCode 200, StatusText ''ccmsetup01/03/2019 16:38:072612 (0x0A34) unable to perform client push with SCCM, i think the problem is ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Please find the below Prajwal Desai link to upgrade SCCM 1810. https://www.prajwaldesai.com/sccm-1810-upgrade-guide - Maybe helpful. On the status in monitoring window of the SCCM console, the Distribution point says that i have successfully distributed content on the remote DP but there is an error saying Failed to create virtual directory? You must log in or register to reply here. Less error but still getting some. PM 3220 (0x0C94) Folder 'Microsoft\Microsoft\Configuration Manager' not found. Failed to get DP locations as the expected version from MP 'HTTPS://SCCM-Server-Dan.cork.local'. Retrieved 0 MP records from AD for site '101'ccmsetup01/03/2019 16:38:072612 (0x0A34) Best practices and the latest news on Microsoft FastTrack, The employee experience platform to help people thrive at work, Expand your Azure partner-to-partner network, Bringing IT Pros together through In-Person & Virtual events. Error 0x87d00215ccmsetup01/03/2019 16:38:072612 (0x0A34) "Check configuration settings of the CMG service is up to . Sign up for a free GitHub account to open an issue and contact its maintainers and the community. I just completed a new SCCM Primary Site installation for a customer who has a requirement of HTTPS communication only. Ok cool, so we know its not https then, If you look to the bottom of the log. I'm not great with ConfigMgr logs but ADALOperationProvider.log on the endpoint comes up with "Getting AAD (device) token" with the client ID, ResourceURL, and AccountID every so often but I don't see any errors. ccmsetup01/03/2019 16:38:071124 (0x0464) Can the client see the Distribution Point? ccmsetup01/03/2019 16:38:072612 (0x0A34) ', Based on Certificate Issuer 'domainname Enterprise Root 01i002' found Certificate [Thumbprint B2400DEC508EBAACE84613AE21A33F4F59683BD0] issued to 'PTW01CISWB001. ', Based on Certificate Issuer 'domainname Enterprise Root 01i002' found Certificate [Thumbprint 501B122B1272AD18F74C7766498428CCE2B0B524] issued to 'PTW01CISWB001. Failed to get client version for sending state messages. Sending location request to 'SCCM-Server-Dan.cork.local' with payload ' RegTask: Failed to get certificate. Sending message body ' [DESKTOP-TM866AV] Running on 'Microsoft Windows 10 Pro' (10.0.10240). I'm glad you may have found the root cause! ccmsetup01/03/2019 16:38:072612 (0x0A34) I can only think that it is something i have left out my setup or not installed in my environment. ', Completed validation of Certificate [Thumbprint B2400DEC508EBAACE84613AE21A33F4F59683BD0] issued to 'PTW01CISWB001. Params to send '5.0.8412.1004 Deployment Error: 0x0, ' ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Uninstall of Symantec Management Agent removed most of the Trusted Certs. Flashback: March 3, 1971: Magnavox Licenses Home Video Games (Read more HERE.) Can you check "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate WUServer" on the device? ccmsetup 6/15/2017 9:50:35 PM 3220 not exist. SOLVED - Client install fails with Error 0x87d00280 on ccmsetup log HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCM\Security\Select First Certificate = 1. https://social.technet.microsoft.com/Forums/exchange/en-US/ed8763fb-5b97-4a29-8b5c-82865aed9828/upgraded-to-1806-from-1802-and-now-i-am-receiving-quotccmsetup-failed-with-error-code. Sharing best practices for building any app with .NET. MEM clients go offline after Altiris / Symantec Management Agent get MapNLMCostDataToCCMCost() returning Cost 0x1ccmsetup01/03/2019 16:38:072612 (0x0A34) FSP: SCCM-SERVER-DAN.CORK.LOCALccmsetup01/03/2019 16:38:072612 (0x0A34) Command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice /ignoreskipupgrade /config:MobileClient.tcfccmsetup01/03/2019 16:38:072612 (0x0A34) Status code is '401' and status description is 'CMGConnector_Unauthorized'. Error code = 0x80070002ccmsetup01/03/2019 16:38:072612 (0x0A34) ENDPOINT FOCUS, the E Logo and the composite ENDPOINT FOCUS & E Logo are registered trademarks and owned by Endpoint Focus Pty Ltd as trustee for Endpoint Focus Trust. CCMPKICERTOPTIONS: 1ccmsetup01/03/2019 16:38:072612 (0x0A34) My MP and SUP are on the same server. RegTask: Failed to get certificate. Error: 0x87d00215 A possible reason for this failure is the CMG connection point failed to forward the message to the management point. OperationalXml '5.00.8740.1002636380443CN=SCCM-Server-Dan.cork.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