SOLVED SCCM Clients Inactive after updating to 2403

[tiger]

After updating to version 2403 all my clients are inactive.
How can i resolve this? This has to be related with a certificate? How do i force deploy certificate to the inactive clients?

 

[Prajwal Desai]

You'll have to go through the logs to determine why the client is inactive - https://www.prajwaldesai.com/sccm-log-files/

 

[tiger]

RegTask: Failed to send registration request message. Error: 0x87d00231 ClientIDManagerStartup 6-6-2024 11:29:38 8616 (0x21A8)
RegTask: Failed to send confirmation request. Error: 0x87d00231 ClientIDManagerStartup 6-6-2024 11:29:38 8616 (0x21A8)

 

[tiger]

In the CcmNotificationAgent.log:

Error: 0x800b0109 (CERT_E_UNTRUSTEDROOT) returned by CertVerifyCertificateChainPolicy!
BgbAgent 25-6-2024 11:00:57 13320 (0x3408)
Error: 0x80004005 authenticating server credentials! BgbAgent 25-6-2024 11:00:57 13320 (0x3408)
Failed to signin bgb client with error = 80004005. BgbAgent 25-6-2024 11:00:57 13320 (0x3408)

 

[Harshit Pandey]

I guess your MP role has some errors. Try repairing the management point role once.

 

[tiger]

thanks for your answer.
I did a repair of the MP.
But the problem still exists.

at the W10-client i did this:
https://<SCCM_SERVER/SMS_MP/.sms_aut?mplist
<MP Name="servername" FQDN="hostname.domain.local">
<Version>9128</Version>
<Capabilities SchemaVersion="1.0">
<Property Name="SSL" Version="1"/>
<Property Name="SSLState" Value="63"/>
</Capabilities>
</MP>
</MPList>

https://<SCCM_SERVER/SMS_MP/.sms_aut?mpcert
<MPCertificate>
<Certificate/>
</MPCertificate>

So i quess the client functioning with the certificate.
Am i right that this is server related?

 

[tiger]

thanks for your answer.
I did a repair of the MP.
But the problem still exists.

at the W10-client i did this:
https://<SCCM_SERVER/SMS_MP/.sms_aut?mplist
<MP Name="servername" FQDN="hostname.domain.local">
<Version>9128</Version>
<Capabilities SchemaVersion="1.0">
<Property Name="SSL" Version="1"/>
<Property Name="SSLState" Value="63"/>
</Capabilities>
</MP>
</MPList>

https://<SCCM_SERVER/SMS_MP/.sms_aut?mpcert
<MPCertificate>
<Certificate/>
</MPCertificate>

So i quess the client functioning with the certificate.
Am i right that this is server related?

 

[tiger]

After applying and deploying the certificates:

Deploy PKI Certificates for SCCM Step by Step Guide

Deploy PKI Certificates for SCCM 2012 R2,Step by Step Guide to Deploy PKI Certificates for SCCM 2012 R2, Step by Step Guide SCCM 2012 R2 PKI

www.prajwaldesai.com

the problem seems to be solved.