SOLVED Configure PXE Boot for HTTPS ( CM 1802 )

[Pavel Kuyan]

Hi,

Need help to understand. I configured DP for PXE but have problem when i tried to boot via network on client



I found that it is a problem because I'm working in HTTPS mode
SMSPXE.log

Prioritizing local MP https://SW-IT-SCCM-01. SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
SSL - using authenticator in request. SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
In SSL, but with no client cert SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
SSL - using authenticator in request. SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
In SSL, but with no client cert SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
Client lookup reply: <ClientIDReply><Identification Unknown="0" DuplicateSMBIOS="0" DuplicateMACAddress="0" ItemKey="0" ServerName=""><Machine><ClientID/><NetbiosName/></Machine></Identification></ClientIDReply>
SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
00:50:56:89:65:A3, AA330942-4C65-6FB5-15E8-0FC48B4F38DB: device is not in the database. SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
Prioritizing local MP https://SW-IT-SCCM-01 SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
SSL - using authenticator in request. SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
In SSL, but with no client cert SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
SSL - using authenticator in request. SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
In SSL, but with no client cert SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
Getting boot action for unknown machine: item key: 2046820353 SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
Prioritizing local MP https://SW-IT-SCCM-01 SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
SSL - using authenticator in request. SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
In SSL, but with no client cert SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
Request using architecture 9. SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
SSL - using authenticator in request. SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
In SSL, but with no client cert SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
Client boot action reply: <ClientIDReply><Identification Unknown="0" DuplicateSMBIOS="0" DuplicateMACAddress="0" ItemKey="2046820353" ServerName=""><Machine><ClientID/><NetbiosName/></Machine></Identification><PXEBootAction LastPXEAdvertisementID="" LastPXEAdvertisementTime="" OfferID="" OfferIDTime="" PkgID="" PackageVersion="" PackagePath="" BootImageID="" Mandatory=""/></ClientIDReply>
SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
Request retry. SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
SSL - using authenticator in request. SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
In SSL, but with no client cert SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
Client boot action reply: <ClientIDReply><Identification Unknown="0" DuplicateSMBIOS="0" DuplicateMACAddress="0" ItemKey="2046820353" ServerName=""><Machine><ClientID/><NetbiosName/></Machine></Identification><PXEBootAction LastPXEAdvertisementID="" LastPXEAdvertisementTime="" OfferID="" OfferIDTime="" PkgID="" PackageVersion="" PackagePath="" BootImageID="" Mandatory=""/></ClientIDReply>
SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
00:50:56:89:65:A3, AA330942-4C65-6FB5-15E8-0FC48B4F38DB: no advertisements found SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
Prioritizing local MP https://SW-IT-SCCM-01. SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
SSL - using authenticator in request. SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
In SSL, but with no client cert SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
SSL - using authenticator in request. SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)
In SSL, but with no client cert SMSPXE 8/2/2018 6:37:47 PM 5068 (0x13CC)




Can you help me to understand where is my mistake. I used imported certificate for DP (used ur manual for this)

Also, what additional info i should to provide

 

[Prajwal Desai]

On the DP > Go to IIS > Default website site > Right click properties > IIS bindings > HTTPS > assign a correct HTTPS certificate and that should fix the issue.
https://prajwaldesai.com/sccm-osd-error-socket-connect-failed-8007274d/

 

[pyves]

Hello, could you please let me know where i could find the manual to import a certificat for booting in PXE with https ? as said "I used imported certificate for DP (used ur manual for this)"