Agent Communication

[mame]

Hi,

I have successfully installed the SCCM 2012 on one single server (incl. SQL2008R2SP1) and were also successful on some clients that show up on my console. Unfortunately I do have left one client (and any new joined test client) that do not communicate with my MP.

 

Log file MP_RegistrationManager on my SCCM server show following text (part of):

[LOG[MP Reg: Processing completed. Completion state = 0]LOG]!><time="15:48:09.770-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="1" thread="4696" file="regtask.cpp:204">

< ![LOG[Processing Registration request from Client 'GUID:F1D4F0BD-70A7-4A9F-9BE9-384A591D94CB']LOG]!><time="15:50:49.688-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="1" thread="1640" file="regtask.cpp:965">

< ![LOG[begin validation of Certificate [Thumbprint 3E23D608C9BDD2EAF429FBB8A3D1CAA1E057810D] issued to 'CLIENTxy']LOG]!><time="15:50:49.688-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="1" thread="1640" file="ccmcert.cpp:1169">

< ![LOG[The certificate chain processed correctly but terminated in a root certificate not trusted per ConfigMgr CTL.]LOG]!><time="15:50:49.704-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="3" thread="1640" file="ccmcert.cpp:951">

< ![LOG[Completed validation of Certificate [Thumbprint 3E23D608C9BDD2EAF429FBB8A3D1CAA1E057810D] issued to 'CLIENTxy']LOG]!><time="15:50:49.704-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="1" thread="1640" file="ccmcert.cpp:1310">

< ![LOG[MP Reg: Client in-band certificate is not valid due to failures in certificate chain validation, Raising status event. Failure HR = 0x800b0109, In-band Cert SubjectName = CLIENTxy]LOG]!><time="15:50:49.704-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="2" thread="1640" file="regtask.cpp:859">

< ![LOG[Raising event:

[sMS_CodePage(437), SMS_LocaleID(1033)]

instance of MpEvent_CertInvalidChain

{

ClientID = "GUID:DB1D6BA9-4245-47D4-AC4E-38EA331F64D6";

DateTime = "20120520135049.708000+000";

MachineName = "SCCMserver";

ProcessID = 1060;

SubjectName = "CLIENTxy";

ThreadID = 1640;

Win32ErrorCode = 2148204809;

};

]LOG]!><time="15:50:49.710-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="1" thread="1640" file="event.cpp:729">

< ![LOG[MP Reg: Registration request body is invalid.]LOG]!><time="15:50:49.710-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="2" thread="1640" file="regtask.cpp:1705">

< ![LOG[MP Reg: Registration failed.]LOG]!><time="15:50:49.710-120" date="05-20-2012" component="MP_RegistrationManager" context="Registration" type="2" thread="1640" file="regtask.cpp:166">

 

I followed so many links which describe a solution but in anhoy none of them worked for me. All my certificates are 100% equal as well all the registry entries are similar compared on a working WIN7 client with the one that brings up the above error message.

 

Any solution is therefore more then welcome. (just a small note: I am a newbie on SCCM at all)

 

Many thanks,

mame