SOLVED SCCM Client installation (push) failure

[VincentD]

Hello,

I'm struggling with SCCM Client installation push to install/upgrade clients in DMZ. With SCCM CB environment, from Primary site to MP/DP in DMZ.
I set up the DMZ boundaries, and enable the CPI (with an account that has local admin on the clients) , check the CCM.log but nothing happened.
I right-click on a discovered machine CLIENTX02 and "install client" then I saw movement in CCM.log :
---> Created service "ccmsetup" on machine "CLIENTX02". SMS_CLIENT_CONFIG_MANAGER 2019-05-30 2:27:49 PM 9208 (0x23F8)
---> Started service "ccmsetup" on machine "CLIENTX02". SMS_CLIENT_CONFIG_MANAGER 2019-05-30 2:27:49 PM 9208 (0x23F8)
---> Deleting SMS Client Install Lock File '\\CLIENTX02\admin$\SMSClientInstall.PR1' SMS_CLIENT_CONFIG_MANAGER 2019-05-30 2:27:49 PM 9208 (0x23F8)

on the CLIENTX02, the CCMSETUP.log is there but I see the following errors and nothing get installed (see attached log)

the MP/DP are :
SERVER02.Mydomain.Contoso.CA
SERVER03.Mydomain.Contoso.CA
DMZSERVER01.DMZdomain.Contoso.CA

but because of FW rules only the DP/MP (DMZSERVER01) in the DMZ should be accessible for my DMZ client CLIENTX02

Can you please help me with this issue?

Thanks in Advance

 

[Garth]

It is likely a Firewall issue as the log clearly show that is can't talk to your DMZ MP. the operation is timing out.

 

[VincentD]

My DMZ MP and my CLIENTX02 are on the same subnet. Do I have to add specific FW rules on DMZ MP then?

 

[Garth]

You need port 80 open at least.

 

[VincentD]

Checked FW ports for port 80. it was ok. Finally, after rebooting the DMZSERVER01 DP/MP the clients started the communication and install was successfull. It was maybe a pending restart related to IIS?
Thanks