Search the Community

Hi, i have an issue where clients do not register on the SCCM Server. right away in the installlogs of ccmlient i get the message - the client should selfsign a certificate Failed in GetCertificate(...): 0x87d00281 ClientIDManagerStartup 16.06.2017 11:27:22 2152 (0x0868) after finishing installation i get [RegTask] - Client registration is pending. Sending confirmation request for GUID:800EDA26-EB75-4705-A07D-A508EFD40AEB ... ClientIDManagerStartup 16.06.2017 12:19:40 3996 (0x0F9C) the corresponding log files (MP_Registration.log) on the server show Processing Registration request from Client 'GUID:800EDA26-EB75-4705-A07D-A508EFD40AEB' MP_RegistrationManager 16.06.2017 10:55:08 5836 (0x16CC) Begin validation of Certificate [Thumbprint 306C84D474B71BBE06B439B694BF9F30E055B930] issued to 'SMS' MP_RegistrationManager 16.06.2017 10:55:08 5836 (0x16CC) Completed validation of Certificate [Thumbprint 306C84D474B71BBE06B439B694BF9F30E055B930] issued to 'SMS' MP_RegistrationManager 16.06.2017 10:55:08 5836 (0x16CC) MP Reg: DDR written to [C:\Program Files\Microsoft Configuration Manager\inboxes\auth\ddm.box\regreq\OVAZZA59.RDR] for Client [GUID:800EDA26-EB75-4705-A07D-A508EFD40AEB] with Subject [S-1-5-21-527882476-1223335848-3349973996-102144] Certificate Thumbprint [306C84D474B71BBE06B439B694BF9F30E055B930] MP_RegistrationManager 16.06.2017 10:55:08 5836 (0x16CC) MP Reg: Processing completed. Completion state = 0 MP_RegistrationManager 16.06.2017 10:55:08 5836 (0x16CC) MP Reg: Did not find client(GUID:6D24FF4E-4F80-4ECB-86E4-5044D77CDBAE) public key. This may be because the client has not registered yet. MP_RegistrationManager 16.06.2017 10:55:15 5836 (0x16CC) MP Reg: Processing completed. Completion state = 0 MP_RegistrationManager 16.06.2017 10:55:15 5836 (0x16CC) when i opened C:\Program Files\Microsoft Configuration Manager\inboxes\auth\ddm.box\regreq\ there was no file called OVAZZA59.RDR - the file was in an folder called BAD_DDRS. what could be the cause that te RDR file was put into BAD_DDRS and why could the client not genereate a self signed certificate? any help would be greatly appreciated Thanks!