PENDING CRP Health check request failed, status code is 404, 'Not Found'

[EddieLB]

I am stripping down my SCCM to resolve some really bad issues. My clients have went rogue and started to have question marks by the icons. My reports are not working plus a ton more. I need help with CRP first. Its giving me contant 404 errors and all my checks look good as far as in IIS and the CRP itself. here are the logs.


CRP's previous status was 1 (0 = Online, 1 = Failed, 4 = Undefined) SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 11:59:29 AM 5264 (0x1490)
Health check request failed, status code is 404, 'Not Found'. SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 11:59:29 AM 5264 (0x1490)
STATMSG: ID=10202 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_CERTIFICATE_REGISTRATION_POINT" SYS=WSUS01.CARES.ORG SITE=CIT PID=3568 TID=5264 GMTDATE=Thu Jun 29 16:59:29.223 2017 ISTR0="404" ISTR1="Not Found" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 11:59:29 AM 5264 (0x1490)
Completed the CRP availability check against local computer. SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 11:59:29 AM 5264 (0x1490)
Starting CRP certificate maintenance... SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 11:59:29 AM 5264 (0x1490)
Successfully granted permission to certificate SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 11:59:29 AM 5264 (0x1490)
CRP website is using PKI issued certificate SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 11:59:29 AM 5264 (0x1490)
Finished certificate maintenance... SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 11:59:29 AM 5264 (0x1490)
Waiting for changes for 600 seconds SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 11:59:29 AM 5264 (0x1490)
Checking CRP service availability state SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Machine name is 'WSUS01.CARES.org'. SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Begin validation of Certificate [Thumbprint ef484e5dffdc80f97c9166966fd3b6edc16b7729] issued to 'WSUS01.CARES.org' SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Certificate has "SSL Client Authentication" capability. SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Completed validation of Certificate [Thumbprint ef484e5dffdc80f97c9166966fd3b6edc16b7729] issued to 'WSUS01.CARES.org' SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Begin validation of Certificate [Thumbprint 93c0daab1e1e8d415e11fa6bb508756af70b61df] issued to 'WSUS01.CARES.org' SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Completed validation of Certificate [Thumbprint 93c0daab1e1e8d415e11fa6bb508756af70b61df] issued to 'WSUS01.CARES.org' SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Skipping this certificate which is not valid for ConfigMgr usage. SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Begin validation of Certificate [Thumbprint 7fb4a8ceb449650f8d51f7ade5b95b4ec55c47d2] issued to 'WSUS01.CARES.org' SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Certificate has "SSL Client Authentication" capability. SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Completed validation of Certificate [Thumbprint 7fb4a8ceb449650f8d51f7ade5b95b4ec55c47d2] issued to 'WSUS01.CARES.org' SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Begin validation of Certificate [Thumbprint 7e853b5393f371b4964b4f9e240d93f682e48bb3] issued to 'WSUS01.CARES.org' SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Certificate has "SSL Client Authentication" capability. SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Completed validation of Certificate [Thumbprint 7e853b5393f371b4964b4f9e240d93f682e48bb3] issued to 'WSUS01.CARES.org' SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Begin validation of Certificate [Thumbprint 68bbef5d38dc1fcac8ef9a661420a5aac19b5688] issued to 'WSUS01.CARES.org' SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Certificate doesn't have "SSL Client Authentication" capabilities. SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Completed validation of Certificate [Thumbprint 68bbef5d38dc1fcac8ef9a661420a5aac19b5688] issued to 'WSUS01.CARES.org' SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Skipping this certificate which is not valid for ConfigMgr usage. SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Begin validation of Certificate [Thumbprint 237124e2ba277aae2c59bf160c69da322e10ae9b] issued to 'WSUS01.CARES.org' SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Certificate has "SSL Client Authentication" capability. SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Completed validation of Certificate [Thumbprint 237124e2ba277aae2c59bf160c69da322e10ae9b] issued to 'WSUS01.CARES.org' SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
>>> Selected Certificate [Thumbprint 237124e2ba277aae2c59bf160c69da322e10ae9b] issued to 'WSUS01.CARES.org' for HTTPS Client Authentication SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
CRP's previous status was 1 (0 = Online, 1 = Failed, 4 = Undefined) SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)
Health check request failed, status code is 404, 'Not Found'. SMS_CERTIFICATE_REGISTRATION_POINT 6/29/2017 12:09:29 PM 5264 (0x1490)


This is repeatedly occuring and I want to get this to online before I begin adding all of the other roles back. Can someone give me a little insight here? Thanks

 

[Prajwal Desai]

Don't see any issues in the above log lines except the health check request failed, status code is 404. Are you sure there are no errors in IIS logs, because that's the only way I can attempt to troubleshoot this issue. Else I have to agree with you on adding all the roles back !!