OSD task sequence hangs when set to https only

[CakeM1x]

So I've set up all the certs for osd in https mode. I switch everything to https and it it installs the os and sets up the client but then just hangs on the sccm screen even if I don't have anything after it. If I switch the site to "https or http" in the client computer communication of the site then the osd task sequence works fine. I've googled the log errors but nothing is coming up to resolve the issue. Anyone experienced this issue before? Very frustrating!

 

[CakeM1x]

So after it installs the os it applies the drivers and then install the sccm client and reboots. After the reboot is when it just sits at the sccm screen and does nothing. No progress bar or anything. This only happens when I switch the site server to HTTPS Only. Everything else seems to work in https only mode except osd.

[Peter van der Woude]

Did you check the client log files? It should provide some more details on why it;s failing.

[CakeM1x]

I have but everything I google nothing comes up that's helpful. What logs are the best to check? My guess is that it is something with the cert but everything works fine except after it installs the sccm client and reboots back into the task sequence.

[Peter van der Woude]

I would start with the ClientIdManagerStartup.log.

[CakeM1x]

Yeah I've looked and google these errors for osd.

<![LOG[begin searching client certificates based on Certificate Issuers]LOG]!><time="11:41:13.249+300" date="09-09-2014" component="CcmMessaging" context="" type="1" thread="2460" file="ccmcert.cpp:4393">

<![LOG[Certificate Issuer 1 [CN=Root Certification Authority; DC=domain; DC=local]]LOG]!><time="11:41:13.249+300" date="09-09-2014" component="CcmMessaging" context="" type="1" thread="2460" file="ccmcert.cpp:4409">

<![LOG[Finding certificate by issuer chain returned error 80092004]LOG]!><time="11:41:13.249+300" date="09-09-2014" component="CcmMessaging" context="" type="2" thread="2460" file="ccmcert.cpp:4516">

<![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="11:41:13.249+300" date="09-09-2014" component="CcmMessaging" context="" type="1" thread="2460" file="ccmcert.cpp:4550">

<![LOG[unable to find any Certificate based on Certificate Issuers]LOG]!><time="11:41:13.249+300" date="09-09-2014" component="CcmMessaging" context="" type="2" thread="2460" file="ccmcert.cpp:4702">

<![LOG[Raising event:

Do I have to insert the certificate into the task sequence with MDT? Everything works up til the config manager client gets installed and then the machine reboots. When it comes back up it just sits at the sccm screen.

[CakeM1x]

Has anyone ran into this problem before? I've scoured the net for answers but nothing has worked. I switched it back to https or http for now since that works fine. But in https only when the machine reboots when it finishes "setup windows and configuration manager" is when it comes back to sccm and just sits there hung up it seems.

 

Very frustrating!

[wilbywilson]

Have you seen this article? Looks like someone went through something pretty similar, and it lists the steps that they took to get OSD working over HTTPS:

 

http://ittherapist.net/2014/01/16/sccm-2012-r2-os-deployment-with-pki-https/

 

[CakeM1x]

Yeah I saw that article. I never had to use mdt with sccm 2007. Is it necessary now?

[CakeM1x]

Anyone? This is driving me crazy. I've set everything up correctly per all the technet/blogs and nothing works. I tried changing the dp cert to a network share that didnt work. Now I switched it back to the old one and now the osd task sequence fails right after putting in my password. Why!

 

-Andrew