Search the Community

Hi i am trying to setup a Internet MP for just users that never see an office. i have follwed this post to set it up but running into issues that i cant figure out. i am hoping that someone can assist me in getting this fixed. http://www.systemcenterdudes.com/internet-based-client-management/ I went and did all the client certs before installing. made sure IIS had the cert installed before SCCM was installed. made sure site and site systems were set for internet and intranet access. imported DP cert in the dp section. installed SCCM and got no errors. Here is from the mpcontrol.log Machine name is 'NWICCM01.nwtraders.msft'. 1/7/2015 2:12:49 PM Begin validation of Certificate [Thumbprint 98542e7bd2343725dda3f14a69cb373274df9a63] issued to 'NWICCM01.nwtraders.msft' 1/7/2015 2:12:49 PM Completed validation of Certificate [Thumbprint 98542e7bd2343725dda3f14a69cb373274df9a63] issued to 'NWICCM01.nwtraders.msft' 1/7/2015 2:12:49 PM Skipping this certificate which is not valid for ConfigMgr usage. 1/7/2015 2:12:49 PM There are no certificate(s) that meet the criteria. 1/7/2015 2:12:49 PM Performing machine FQDN to SAN2 search. 1/7/2015 2:12:49 PM Begin validation of Certificate [Thumbprint 98542e7bd2343725dda3f14a69cb373274df9a63] issued to 'NWICCM01.nwtraders.msft' 1/7/2015 2:12:49 PM Completed validation of Certificate [Thumbprint 98542e7bd2343725dda3f14a69cb373274df9a63] issued to 'NWICCM01.nwtraders.msft' 1/7/2015 2:12:49 PM Using custom selection criteria based on the machine NetBIOS name. 1/7/2015 2:12:49 PM Machine name is 'NWICCM01'. 1/7/2015 2:12:49 PM Begin validation of Certificate [Thumbprint 98542e7bd2343725dda3f14a69cb373274df9a63] issued to 'NWICCM01.nwtraders.msft' 1/7/2015 2:12:49 PM Completed validation of Certificate [Thumbprint 98542e7bd2343725dda3f14a69cb373274df9a63] issued to 'NWICCM01.nwtraders.msft' 1/7/2015 2:12:49 PM Skipping this certificate which is not valid for ConfigMgr usage. 1/7/2015 2:12:49 PM Begin validation of Certificate [Thumbprint 341f426c7a86ea084ff324ede6450fa173498f4c] issued to 'sccmlab.domain.com' 1/7/2015 2:12:49 PM Certificate doesn't have "SSL Client Authentication" capabilities. 1/7/2015 2:12:49 PM Completed validation of Certificate [Thumbprint 341f426c7a86ea084ff324ede6450fa173498f4c] issued to 'sccmlab.domain.com' 1/7/2015 2:12:49 PM Skipping this certificate which is not valid for ConfigMgr usage. 1/7/2015 2:12:49 PM There are no certificate(s) that meet the criteria. 1/7/2015 2:12:49 PM Failed to retrieve client certificate. Error -2147467259 1/7/2015 2:12:49 PM Call to HttpSendRequestSync failed for port 443 with -2147467259 error code. 1/7/2015 2:12:49 PM Sent summary record of SMS Management Point on ["Display=\\NWICCM01.NWTRADERS.MSFT\"]MSWNET:["SMS_SITE=IMP"]\\NWICCM01.NWTRADERS.MSFT\ to \\NWICCM01.nwtraders.msft\SMS_IMP\inboxes\sitestat.box\haj0o219.SUM, Availability 1, 52425724 KB total disk space , 42883468 KB free disk space, installation state 0. 1/7/2015 2:12:49 PM Http test request failed, error code is -2147467259. 1/7/2015 2:12:49 PM Successfully performed Management Point availability check against local computer. 1/7/2015 2:12:49 PM i can telnet to the open 443 over the web and no issues there long with port 80. in the line that says Begin validation of Certificate [Thumbprint 341f426c7a86ea084ff324ede6450fa173498f4c] issued to 'sccmlab.domain.com' i have followed that document and am sure it does have ssl capabilities. am i missing a step in IIS????