SOLVED Cannot push CM agents and they do not report in

[tomsimon]

I have set up Configuration Manager by the book. I had to integrate it with an existing WSUS and SQL Server.

I have not been able to successfully push the agent to the three workstations that I tried. Oddly, one workstation installed a little better than the other one, but neither is fully installed and showing as green.

I have tweaked just about everything I can think of, and I have poured through endless articles and forums. I would greatly appreciate some help.

There are no errors in the MPcontrol.log. The workstation logs have these errors:

LocationServices.log:
[CCMTPP] AsyncCallback() WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered
[CCMTPP] AsyncCallback() WINHTTP_CALLBACK_STATUS_FLAG_CERT_CN_INVALID is set
Failed in WinHttpSendRequest API, ErrorCode = 0x2f8f
Successfully queued event on HTTP/HTTPS failure for server MACHINENAME
Failed to send management point list Location Request Message to MACHINENAME

ClientIDManagerStartup.log:
RegTask: Failed to send registration request message. Error 0x87d00231

CCMmessaging.log:
[CCMTPP] AsyncCallback() WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered
[CCMTPP] AsyncCallback() WINHTTP_CALLBACK_STATUS_FLAG_CERT_CN_INVALID is set
Failed in WinHttpSendRequest API, ErrorCode = 0x2f8f
Post to https://MACHINENAME/ccm_system/request failed with 0x87d00231
Failed to WMI namespace \.root\ccm (80041003)

CCMSetup.log:
[CCMTPP] AsyncCallback() WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered
[CCMTPP] AsyncCallback() WINHTTP_CALLBACK_STATUS_FLAG_CERT_CN_INVALID is set
Failed to submit event to the Status Agent. Attempting to create pending event.
Failed in WinHttpSendRequest API, ErrorCode = 0x2f8f
Failed (0x80072f8f) to send location request to ‘MACHINENAME’. StatusCode 200, StatusText”
Failed to send location message to 'https://MACHINENAME.' Status text ''
GetDPLocations failed with error '0x80072f8f
Failed to get DP locations as the expected version from MP ‘HTTPS://MACHINENAME’. Error 0x80072f8f

Also, I cannot get any WSUS updates to show up, but that might be an unrelated issue.

 

[tomsimon]

Update: I reverted to HTTP on all roles, and clients started reporting. Then I turned HTTPS back on for the MP only, and all clients went offline. The only error in MPcontrol.log is "Call to HttpSendRequestSync failed for port 443 with status code 401, text: Unauthorized"

 

[tomsimon]

Getting this error in CcmMessaging.log on client:
Client doesn’t have PKI issued cert and cannot get CCM access token. Error 0x8000ffff

I have confirmed that the client indeed has a certificate issued from the CA

 

[mwakalama]

I have a similar issue. CB 2002