MECM 2309 OSD via client failing at Applying device drivers

[Jeremy Lyons]

Hi,

 

I am relatively new to MECM and am having an issue with OSD via config client on all models of computers in our organization. all computers are physical computers.

 

They are failing at applying device drivers with the following error

Failed to create certificate store from encoded certificate. Verify the provided Certificate was provisioned correctly. . 
An error occurred during encode or decode operation. (Error: 80092002; Source: Windows)

interestingly enough the usb distribution is completing successfully:

 

attached full log

I want to add what i have tried so far, to no avail:

1. according to this link:

 https://learn.microsoft.com/en-us/answers/questions/784791/configmanager-unable-to-perform-osd-that-starts-fr

i added a command to change the registry:

reg.exe add HKLM\SOFTWARE\Policies\Microsoft\TPM /v OSManagedAuthLevel /t REG_DWORD /d 2 /f

before and after the apply operating system stage.

 

2. Rebuilt the task sequence with only basic commands 

 

why is this failing?

Is there any more information that may help?

one interesting difference that i noticed is that the config client osd is trying to set a client certificate however the usb osd is creating successfully a media certificate.

 

on further investigation and working according to this blog:

https://www.prajwaldesai.com/enable-sccm-enhanced-http-configuration/

I found that enhanced http is configured on the server

, however even thought the certificate is found in the certlm.msc

, the manager is not importing the certificate to the IIS:

Referring to the difference between USB OSD and CLient Config OSD the certificates only show on the client after the USB OSD and not when using the client.

The server is 2016 

 

I have tried to restart the server, remove and re-install the configuration, also to no avail. 

smsts-m920.log

[anyweb]

from you log i saw this line

 

Quote

Failed to create certificate store from encoded certificate. Verify the provided Certificate was provisioned correctly. .
An error occurred during encode or decode operation. (Error: 80092002; Source: Windows)

and a quick search brought me here https://learn.microsoft.com/en-us/troubleshoot/mem/configmgr/os-deployment/pxe-boot-not-work

 

can you try the advice there and report back ?

[Jeremy Lyons]

Thanks for your reply.

I finally found the solution, i noticed that the boot image was not up2date, with the current client:

i created a new one and now it works.

Then i saw you can up date the current boot images by using the update distribution points

[anyweb]

thanks for posting your solution so that others may learn from it