PENDING Client is on internet / WINHTTP_CALLBACK_STATUS_FLAG_CERT_REV_FAILED is set

[JohnM]

Hello,

I'm facing a problem while on Build & Capture TS. Following this Microsoft article, when a client cannot contact a domain controller or a on-premises MP, the client is considered as internet client and not intranet. We currently use SCCM only for intranet so I don't understand why the client cannot contact the MP. I use the following settings for the SCCM client : SMSCACHESIZE=10240 SMSMP=SCCM.domain.com

The TS only fails when there is an Install Application step. If I remove this step, I'm able to capture a reference image.

An error that seems to block the TS is WINHTTP_CALLBACK_STATUS_FLAG_CERT_REV_FAILED is set. I already read the article of Prajwal and turned off the CRL on Site settings but it don't works.

I'm on it since 3 weeks, cannot find a solution.

Any idee ?

Thanks for your help.


JohnM

 

[michael.lecomber]

I assume your environment is PKI?

Are there any errors being shown on that MP under the monitoring tab?

 

[JohnM]

Yes is PKI.

On Site Status all roles are OK.

I only have this problem for clients that are on workgroup (while doing a Build and Capture TS).

There is a screenshot of the ClientLocation.log :

 

[JohnM]

Hello,

I solved part of my problem but the apps still won't install yet.

To bypass the mentioned problem, I added the following parameters for the SCCM Client :

/UsePKICert /NoCRLCheck CCMHTTPSSTATE=31

With that, I don't have anymore the WINHTTP_CALLBACK_STATUS_FLAG_CERT_REV_FAILED error and the client is reported as Intranet. I also can see on the logs that the client is able to find the MP.

I continue to look for the problem of the apps installation step and will report it there if there is something new.

 

[JohnM]

It seems that the following errors hangs the install applications step :



I already checked the Prajwal post. https://www.prajwaldesai.com/sccm-osd-error-socket-connect-failed-8007274d/

Any idea ?