SCCM 1810 | Client not installing or not getting services location

[syparon]

Hello,

We just installed the hotfix for SCCM 1810 (KB4486457).
This hotfix implies a new version of the SCCM agent (5.00.8740.1024).
We configured SCCM to deploy automatically this agents on workstations and servers but we are experiencing the following issue (ccmsetup.log) :

Quote

Checking the URL 'HTTPS://configmgr-MPDP01PDP1.DOMAIN.COM/CCM_Client/ccmsetup.cab'    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
MapNLMCostDataToCCMCost() returning Cost 0x1    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Client is not on internet    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Client is set to use webproxy if available.    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Client is not allowed to use or doesn't have PKI cert while talking to HTTPS server.    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
[CCMHTTP] ERROR: URL=HTTPS://configmgr-MPDP01PDP1.DOMAIN.COM/CCM_Client, Port=0, Options=448, Code=0, Text=CCM_E_NO_CLIENT_PKI_CERT    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
[CCMHTTP] ERROR INFO: StatusCode=<unknown> StatusText=    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Raising event:
instance of CCM_CcmHttp_Status
{
    ClientID = "GUID:a9a3b919-f053-4779-aaf5-9d03a1de7211";
    DateTime = "20190213135049.082000+000";
    HostName = "configmgr-MPDP01PDP1.DOMAIN.COM";
    HRESULT = "0x87d00454";
    ProcessID = 5232;
    StatusCode = 0;
    ThreadID = 6480;
};
    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Status Agent hasn't been initialized yet. Attempting to create pending event.    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Raising pending event:
instance of CCM_CcmHttp_Status
{
    ClientID = "GUID:a9a3b919-f053-4779-aaf5-9d03a1de7211";
    DateTime = "20190213135049.082000+000";
    HostName = "configmgr-MPDP01PDP1.DOMAIN.COM";
    HRESULT = "0x87d00454";
    ProcessID = 5232;
    StatusCode = 0;
    ThreadID = 6480;
};
    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Successfully submitted pending event to WMI.    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
GetDirectoryList failed with a non-recoverable failure, 0x87d00454    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Failed to get directory list from 'HTTPS://configmgr-MPDP01PDP1.DOMAIN.COM/CCM_Client'. Error 0x87d00454    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Failed to correctly receive a WEBDAV HTTPS request.. (StatusCode at WinHttpQueryHeaders: 0) and StatusText: ''     ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Failed to check url HTTPS://configmgr-MPDP01PDP1.DOMAIN.COM/CCM_Client/ccmsetup.cab. Error 0x80004005    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Accessing the URL 'HTTPS://configmgr-MPDP01PDP1.DOMAIN.COM/CCM_Client/ccmsetup.cab' failed with 80004005    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Checking the URL 'HTTPS://configmgr-MPDP01PDP2.DOMAIN.COM/CCM_Client/ccmsetup.cab'    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
MapNLMCostDataToCCMCost() returning Cost 0x1    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Client is not on internet    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Client is set to use webproxy if available.    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Client is not allowed to use or doesn't have PKI cert while talking to HTTPS server.    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
[CCMHTTP] ERROR: URL=HTTPS://configmgr-MPDP01PDP2.DOMAIN.COM/CCM_Client, Port=0, Options=448, Code=0, Text=CCM_E_NO_CLIENT_PKI_CERT    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
[CCMHTTP] ERROR INFO: StatusCode=<unknown> StatusText=    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Raising event:
instance of CCM_CcmHttp_Status
{
    ClientID = "GUID:a9a3b919-f053-4779-aaf5-9d03a1de7211";
    DateTime = "20190213135049.091000+000";
    HostName = "configmgr-MPDP01PDP2.DOMAIN.COM";
    HRESULT = "0x87d00454";
    ProcessID = 5232;
    StatusCode = 0;
    ThreadID = 6480;
};
    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Status Agent hasn't been initialized yet. Attempting to create pending event.    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Raising pending event:
instance of CCM_CcmHttp_Status
{
    ClientID = "GUID:a9a3b919-f053-4779-aaf5-9d03a1de7211";
    DateTime = "20190213135049.091000+000";
    HostName = "configmgr-MPDP01PDP2.DOMAIN.COM";
    HRESULT = "0x87d00454";
    ProcessID = 5232;
    StatusCode = 0;
    ThreadID = 6480;
};
    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Successfully submitted pending event to WMI.    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
GetDirectoryList failed with a non-recoverable failure, 0x87d00454    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Failed to get directory list from 'HTTPS://configmgr-MPDP01PDP2.DOMAIN.COM/CCM_Client'. Error 0x87d00454    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Failed to correctly receive a WEBDAV HTTPS request.. (StatusCode at WinHttpQueryHeaders: 0) and StatusText: ''     ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Failed to check url HTTPS://configmgr-MPDP01PDP2.DOMAIN.COM/CCM_Client/ccmsetup.cab. Error 0x80004005    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Accessing the URL 'HTTPS://configmgr-MPDP01PDP2.DOMAIN.COM/CCM_Client/ccmsetup.cab' failed with 80004005    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
Next retry in 10 minute(s)...    ccmsetup    13/02/2019 14:50:49    6480 (0x1950)
 

I managed to install the client by using the ccmsetup.exe with the following parameters : SMSSITECODE=LOL SMSMP=HTTPS://SCCM-SUPMPDP2.DOMAIN.COM DNSSUFFIX=DOMAIN.COM CCMFIRSTCERT=1 CCMCERTSTORE=MY

But the SCCM client is not able to find its management point.
Actually it finds both MP but considers they are not "Compatible"

Do you have an idea ?

[syparon]

I have some input to give you about this issue :

I've noticed that in the ClientIDManagerStartup.log it's says :
 

Quote

Failed to get certificate subject name using type 6 [80092004]
Failed to get certificate subject name using type 3 [80092004]
Unable to find any Certificate based on Certificate Issuers    ClientIDManagerStartup    15/02/2019 09:09:54    6768 (0x1A70)
PKI Client Certificate matching SCCM certificate selection criteria is not available.    ClientIDManagerStartup    15/02/2019 09:09:54    6768 (0x1A70)

 

I opened a case at Microsoft ... Waiting for the next.

[Update : 12/03/2019] : Microsoft's lvl 3 support is still looking for a solution

[syparon]

We (Microsoft's support and me) finally found the root cause.
It's a bug in CCMUtilLib.dll
This bug is fixed in the future SCCM 1902 release (agent version : 5.00. 8778.1000).

[Ph1eG]

Hi !

The same here with CB1806.

The only method i found to install the agent is to copy agent install directory in C:\ and launch ccmsetup ! not ok via same install directory via unc.

Waiting for 1902 too ^^.

Regards

[anyweb]

well it's out now so get upgrading