SOLVED SCCM client installation failed on the workstation

[TOTO JDD]

Hello,

Here is the error I had when installing the sccm Client with Client Push Installation and I am asking for your help to solve it.
I am using the version of SCCM 1802.

Ccmsetup.log


Cordialement.

 

[Prajwal Desai]

Have you set the DP to run on HTTPS ?. If all distribution points and management points are configured for HTTPS client connections only, verify that the client computer has a valid client certificate.

 

[TOTO JDD]

How to verify if the client has a valid certificate? I use a self signed certificate. I distributed a certificate for client authentication to workstations but I still have the same error message

 

[TOTO JDD]

Hello Prajwal Dessai,

I configured a certificate for the distribution point and another for the client but I still have the same error message as you can see in the ccmsetup.log file in attach.

I applied the following procedure for the KPI certificate:
https://prajwaldesai.com/deploying-the-client-certificate-for-distribution-points/
https://prajwaldesai.com/deploying-the-client-certificate-for-windows-computers/

Cordialy.

 

[Prajwal Desai]

If you are using PKI certs, then a valid cert has to be assigned to the client machines. The DP "if running on HTTPS" should have a PKI cert assigned and not self signed cert. If you are using HTTPS at DP end and

>>> Client selected the PKI Certificate [Thumbprint 161EBDF0228E6EDD6DE3D44A059005FB03260889] issued to 'OSD-TEST1.'Domaine'' ccmsetup 16-08-18 15:41:32 796 (0x031C)
[CCMSETUP] AsyncCallback(): ----------------------------------------------------------------- ccmsetup 16-08-18 15:41:32 796 (0x031C)
[CCMSETUP] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered ccmsetup 16-08-18 15:41:32 796 (0x031C)

if you have followed this guide - https://prajwaldesai.com/deploying-the-client-certificate-for-windows-computers/ to deploy certs to workstations, has the cert been deployed ?. Check the last screenshot in the post to verify the cert deployment.

 

[TOTO JDD]

Hello,

Finally I managed to start the PXE and execute my task sequence successfully.

The problem was because the distribution point and the management point were configured to use https but it was the self signed certificate that was configured on the distribution point. As expected, the HKLM\Software\Microsoft\SMS\DP | ManagementPoints value is empty. This registry key would need to have a value like https://ServerName.DomainName

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\DP]
AlgID = 26115
BindExcept =
…
ManagementPoints =

To resolve this problem, I correctly configure the distribution point with the PKI certificate



Before testing the deployment, I was reassured that the client computer does not exist in the sccm console as the deployment of the task sequence was done on the collection All unknown computers.

Please find the procedures I used for the KPI certificate through these links:

• https://prajwaldesai.com/deploying-the-client-certificate-for-distribution-points/
• https://prajwaldesai.com/deploying-the-client-certificate-for-windows-computers/

Thank you all for your guidance.