PENDING SCCM – OSD not working anymore after switching to HTTPS environment.

[burgisserkevin]

I have recently switched our ConfigMgr environment to use HTTPS communication. Since then, OSD is not working anymore. It fails at step “apply operating system” with error 0x80070002. I receive errors of type “Http result: 403”, “SendResourceRequest() failed. 80190193”, “Download() failed. 80190193" in smts.log file.

Based on my comprehension, I understand that the system will use Network Access User account to retrieve boot image at this step; the system has no operating system installed so it cannot use certificate.

Debug logs (smts.log, ...) have been uploaded

Certificates are valid and not expired
All roles installed on the same server
Network access user configured
SQL Server : Microsoft SQL Server 2016 (SP3-CU1-GDR)
Configuration Manager 2211
IIS Version : 10.0.14393.0
Windows Authentication and anonymous authentication enabled on the default web site

Could anyone help please?

 

[Prajwal Desai]

Are all the certificates deployed correctly? - https://www.prajwaldesai.com/deploy-pki-certificates-for-sccm-2012-r2/

 

[burgisserkevin]

Are all the certificates deployed correctly? - https://www.prajwaldesai.com/deploy-pki-certificates-for-sccm-2012-r2/

Hi Prakwal,
Thank you for answering. Yes, I did follow guides on how to switch Configuration Manager environment to use HTTPS communication.
How do you understand the situation based on the smts.log file I provided?
Based on my understanding, I understand that the system will use Network Access User account to retrieve boot image at this step; the system has no operating system installed so it cannot use certificate.

 

[burgisserkevin]

Hi Prakwal,
Thank you for answering. Yes, I did follow guides on how to switch Configuration Manager environment to use HTTPS communication.
How do you understand the situation based on the smts.log file I provided?
Based on my understanding, I understand that the system will use Network Access User account to retrieve boot image at this step; the system has no operating system installed so it cannot use certificate.

Prakwal, do you have any news?
Do I need to recreate boot images?