I posted this on myitforum but I am still not entirely clear on what is happening....
We’re beginning a computer refresh from XP to W7. I have created USMT task sequences for client profile migration.
When the client attempts to connect to the SMP I get the following error from the smsts.log:
Failed to verify certificate signature for 'distributionpoint.domain.local' (0x80090006) ClientKeyRequestToSMP failed (0x80090006).
I tried deleting the cert on the client machine, and that provided this in the locationservices.log:
Both the trusted key and the mp certificate have changed on serverThe client cannot validate the authentication information
I AM able to resolve this by running CCMSetup RESETKEYINFORMATION=TRUE however that does not seem like a very clean solution.
Some have suggested running the delcert.exe utility on my management point but I do not know the impact that will have on my environment.
I have installed the hotfix KB977203 on my site server and deployed ccmcertfix.exe to all of my clients. I thought this was all I needed to do to correct all of the certificate problems caused by the windows update KB974571.
We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.
I posted this on myitforum but I am still not entirely clear on what is happening....
We’re beginning a computer refresh from XP to W7. I have created USMT task sequences for client profile migration.
When the client attempts to connect to the SMP I get the following error from the smsts.log:
Failed to verify certificate signature for 'distributionpoint.domain.local' (0x80090006) ClientKeyRequestToSMP failed (0x80090006).
I tried deleting the cert on the client machine, and that provided this in the locationservices.log:
Both the trusted key and the mp certificate have changed on serverThe client cannot validate the authentication information
I AM able to resolve this by running CCMSetup RESETKEYINFORMATION=TRUE however that does not seem like a very clean solution.
Some have suggested running the delcert.exe utility on my management point but I do not know the impact that will have on my environment.
I have installed the hotfix KB977203 on my site server and deployed ccmcertfix.exe to all of my clients. I thought this was all I needed to do to correct all of the certificate problems caused by the windows update KB974571.
Any advice is appreciated,
Dewayne
Share this post
Link to post
Share on other sites