PENDING GetDPLocations failed with error 0x80072f8f

[Hussain Al Sayed]

Hi,
Any help around this error, I'm facing difficulties in pushing the SCCM agent to many clients and majority of them are generating this error in the CCM Log client side...

Server side CCM logs;


---> System OS version string "6.3.9600" converted to 6.30 SMS_CLIENT_CONFIG_MANAGER 17/10/2016 12:32:10 10144 (0x27A0)
---> Unable to connect to WMI (root\ccm) on remote machine "VDI-LEC-03", error = 0x8004100e. SMS_CLIENT_CONFIG_MANAGER 17/10/2016 12:32:10 10144 (0x27A0)
---> Creating \ VerifyingCopying existence of destination directory \\VDI-LEC-03\admin$\ccmsetup. SMS_CLIENT_CONFIG_MANAGER 17/10/2016 12:32:10 10144 (0x27A0)
---> Copying client files to \\VDI-LEC-03\admin$\ccmsetup. SMS_CLIENT_CONFIG_MANAGER 17/10/2016 12:32:10 10144 (0x27A0)
---> Copying file "C:\Program Files\Microsoft Configuration Manager\bin\I386\MobileClient.tcf" to "MobileClient.tcf" SMS_CLIENT_CONFIG_MANAGER 17/10/2016 12:32:10 10144 (0x27A0)
---> Copying file "C:\Program Files\Microsoft Configuration Manager\bin\I386\ccmsetup.exe" to "ccmsetup.exe" SMS_CLIENT_CONFIG_MANAGER 17/10/2016 12:32:10 10144 (0x27A0)
---> Updated service "ccmsetup" on machine "VDI-LEC-03". SMS_CLIENT_CONFIG_MANAGER 17/10/2016 12:32:10 10144 (0x27A0)
---> Started service "ccmsetup" on machine "VDI-LEC-03". SMS_CLIENT_CONFIG_MANAGER 17/10/2016 12:32:10 10144 (0x27A0)
---> Deleting SMS Client Install Lock File '\\VDI-LEC-03\admin$\SMSClientInstall.MUB' SMS_CLIENT_CONFIG_MANAGER 17/10/2016 12:32:10 10144 (0x27A0)
Execute query exec [sp_CP_SetLastErrorCode] 16777241, 0 SMS_CLIENT_CONFIG_MANAGER 17/10/2016 12:32:10 10144 (0x27A0)

 

[Prajwal Desai]

I see that the ccmsetup service has been updated and started. What's the status of client in the console ?.

---> Updated service "ccmsetup" on machine "VDI-LEC-03". SMS_CLIENT_CONFIG_MANAGER 17/10/2016 12:32:10 10144 (0x27A0)
---> Started service "ccmsetup" on machine "VDI-LEC-03". SMS_CLIENT_CONFIG_MANAGER 17/10/2016 12:32:10 10144 (0x27A0)

 

[Hussain Al Sayed]

Unable to find any Certificate based on Certificate Issuers ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)

 

[Prajwal Desai]

Hi Hussain, what is the status of client agent seen in the console ?.

 

[Hussain Al Sayed]

I can see some of the clients which are working without any issue are having a Certificate under the Computer Account / Personal for the Machine as well as the root certificate from our CA..
The Machines which are having issues, doesn't have the Machine Certificate nor the Root certificate from our CA. I have noticed also, some of those machines are having wrong certificate which are inherited from the VDI image itself... such as the below logs which is extracted from one of the machines are having the same issue. In fact, the correct hostname of this machine is different....


Analyzing 1 Chain(s) found ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
Chain has Certificate [Thumbprint 2C3BE3DEB3BEF0CA702EBE0AEE60F158C1732105] issued to [v-Win8Pooled.DOMAIN.com] issued by [CN=xxxxbca; DC=DOMAIN; DC=com] ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
Based on Certificate Issuer 'rcsimubca' found Certificate [Thumbprint 2C3BE3DEB3BEF0CA702EBE0AEE60F158C1732105] issued to 'v-Win8Pooled.rcsi-mub.com' ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
Begin validation of Certificate [Thumbprint 2C3BE3DEB3BEF0CA702EBE0AEE60F158C1732105] issued to 'v-Win8Pooled.DOMAIN.com' ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
CRL check enabled. ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
Verification of Certificate chain returned 800B0109 ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
Completed validation of Certificate [Thumbprint 2C3BE3DEB3BEF0CA702EBE0AEE60F158C1732105] issued to 'v-Win8Pooled.DOMAIN.com' ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
Completed searching client certificates based on Certificate Issuers ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
Unable to find any Certificate based on Certificate Issuers ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
Locate client certificate bypassing Certificate Issuers restriction ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
Begin searching client certificates based on Certificate Issuers ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
Completed searching client certificates based on Certificate Issuers ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
Begin to select client certificate ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'. ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
1 certificate(s) found in the 'MY' certificate store. ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
Only one certificate present in the certificate store. ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
Begin validation of Certificate [Thumbprint 2C3BE3DEB3BEF0CA702EBE0AEE60F158C1732105] issued to 'v-Win8Pooled.DOMAIN.com' ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
The Certificate [Thumbprint 2C3BE3DEB3BEF0CA702EBE0AEE60F158C1732105] issued to 'v-Win8Pooled.DOMAIN.com' has 'Client Authentication' capability. ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
Completed validation of Certificate [Thumbprint 2C3BE3DEB3BEF0CA702EBE0AEE60F158C1732105] issued to 'v-Win8Pooled.DOMAIN.com' ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
>>> Client selected the PKI Certificate [Thumbprint 2C3BE3DEB3BEF0CA702EBE0AEE60F158C1732105] issued to 'v-Win8Pooled.DOMAIN.com' ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
[CCMSETUP] AsyncCallback(): ----------------------------------------------------------------- ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
[CCMSETUP] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
[CCMSETUP] : dwStatusInformationLength is 4
ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
[CCMSETUP] : *lpvStatusInformation is 0x9
ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
[CCMSETUP] : WINHTTP_CALLBACK_STATUS_FLAG_CERT_REV_FAILED is set
ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
[CCMSETUP] : WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set
ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
[CCMSETUP] AsyncCallback(): ----------------------------------------------------------------- ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
GetDPLocations failed with error 0x80072f8f ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)
Failed to get DP locations as the expected version from MP 'HTTPS://v-MUBPRODSCCM01.DOMAIN.com'. Error 0x80072f8f ccmsetup 17/10/2016 15:56:06 5288 (0x14A8)

Highly appreciate your help;

regards,

 

[Hussain Al Sayed]

Hi Parjwal,
the status in the console is nothing (Unmanaged and Client installed = NO )

 

[Hussain Al Sayed]

Any help...?

 

[Hussain Al Sayed]

Unable to find any Certificate based on Certificate Issuers ccmsetup 18/10/2016 12:36:35 372 (0x0174)

Locate client certificate bypassing Certificate Issuers restriction ccmsetup 18/10/2016 12:36:35 372 (0x0174)

Begin searching client certificates based on Certificate Issuers ccmsetup 18/10/2016 12:36:35 372 (0x0174)

Completed searching client certificates based on Certificate Issuers ccmsetup 18/10/2016 12:36:35 372 (0x0174)

Begin to select client certificate ccmsetup 18/10/2016 12:36:35 372 (0x0174)

The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'. ccmsetup 18/10/2016 12:36:35 372 (0x0174)

1 certificate(s) found in the 'MY' certificate store. ccmsetup 18/10/2016 12:36:35 372 (0x0174)

Only one certificate present in the certificate store. ccmsetup 18/10/2016 12:36:35 372 (0x0174)

Begin validation of Certificate [Thumbprint 2C3BE3DEB3BEF0CA702EBE0AEE60F158C1732105] issued to 'v-Win8Pooled.domain.com' ccmsetup 18/10/2016 12:36:35 372 (0x0174)

The Certificate [Thumbprint 2C3BE3DEB3BEF0CA702EBE0AEE60F158C1732105] issued to 'v-Win8Pooled.domain.com' has 'Client Authentication' capability. ccmsetup 18/10/2016 12:36:35 372 (0x0174)

Completed validation of Certificate [Thumbprint 2C3BE3DEB3BEF0CA702EBE0AEE60F158C1732105] issued to 'v-Win8Pooled.domain.com' ccmsetup 18/10/2016 12:36:35 372 (0x0174)

>>> Client selected the PKI Certificate [Thumbprint 2C3BE3DEB3BEF0CA702EBE0AEE60F158C1732105] issued to 'v-Win8Pooled.domain.com' ccmsetup 18/10/2016 12:36:35 372 (0x0174)

[CCMSETUP] AsyncCallback(): ----------------------------------------------------------------- ccmsetup 18/10/2016 12:36:35 372 (0x0174)

[CCMSETUP] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered ccmsetup 18/10/2016 12:36:35 372 (0x0174)

[CCMSETUP] : dwStatusInformationLength is 4

ccmsetup 18/10/2016 12:36:35 372 (0x0174)

[CCMSETUP] : *lpvStatusInformation is 0x9

ccmsetup 18/10/2016 12:36:35 372 (0x0174)

[CCMSETUP] : WINHTTP_CALLBACK_STATUS_FLAG_CERT_REV_FAILED is set

ccmsetup 18/10/2016 12:36:35 372 (0x0174)

[CCMSETUP] : WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set

ccmsetup 18/10/2016 12:36:35 372 (0x0174)

[CCMSETUP] AsyncCallback(): ----------------------------------------------------------------- ccmsetup 18/10/2016 12:36:35 372 (0x0174)

GetDPLocations failed with error 0x80072f8f ccmsetup 18/10/2016 12:36:35 372 (0x0174)

Failed to get DP locations as the expected version from MP 'HTTPS://v-MUBPRODSCCM01.domain.com'. Error 0x80072f8f ccmsetup 18/10/2016 12:36:35 372 (0x0174)

Params to send '5.0.8239.1001 Deployment Error: ' ccmsetup 18/10/2016 12:36:35 372 (0x0174)

Sending Fallback Status Point message to 'V-MUBPRODSCCM01.domain.com', STATEID='101'. ccmsetup 18/10/2016 12:36:35 372 (0x0174)

<ClientDeploymentMessage ErrorCode="0"><Client Baseline="1" Platform="2"/></ClientDeploymentMessage> ccmsetup 18/10/2016 12:36:35 372 (0x0174)

State message with TopicType 800 and TopicId {13CAC7ED-8208-4501-BF88-B9B0EDE60A26} has been sent to the FSP FSPStateMessage 18/10/2016 12:36:35 372 (0x0174)

Next retry in 10 minute(s)... ccmsetup 18/10/2016 12:36:35 372 (0x0174)