Boot media-failed to get information for MP (Network Steve Forum)

Boot media-failed to get information for MP

Scenario: SCCM 2012 R2 CU1,

3 DP's - two are internal and are http. These two are set to create a self-signed certificate. The other one is located in our admin DMZ and is https. We have created a certificate and under the DP properties, it is imported and the file location is on the server.

2 MP's - the internal one is http and the other one is https. The https MP is in our admin DMZ as well.

Workstations cannot by default ping servers in our admin DMZ.

In the console, under Security-Certificates, it lists the DP in our admin DMZ, but with a status of "blocked".

When trying to use boot media (we don't have PXE set up yet), we are getting the errors in the smsts.log file:

Loading variables from the Task Sequencing Removable Media. TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Loading Media Variables from "D:\sms\data\variables.dat" TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Succeeded loading resource DLL 'X:\sms\bin\x64\1033\TSRES.DLL' TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting SMSTSMP TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSMediaGuid TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSBootMediaPackageID TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSBootMediaSourceVersion TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSBrandingTitle TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSCertSelection TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSCertStoreName TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSDiskLabel1 TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSHTTPPort TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSHTTPSPort TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSIISSSLState TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSMediaCreatedOnCAS TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSMediaPFX TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSMediaSetID TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSMediaType TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSPublicRootKey TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSRootCACerts TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSSiteCode TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSSiteSigningCertificate TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSStandAloneMedia TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSSupportUnknownMachines TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSTimezone TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSUseFirstCert TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSx64UnknownMachineGUID TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Setting _SMSTSx86UnknownMachineGUID TS environment variable TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Root CA Public Certs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ootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Importing certificates to root store TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Added certificate to store or replaced matching certificate in store. TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Support Unknown Machines: 1 TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Custom hook from X:\\TSConfig.INI is TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

No hook is found to be executed before downloading policy TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Authenticator from the environment is empty. TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Need to create Authenticator Info using PFX TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Initialized CStringStream object with string: BC2F9610-54F8-4D6C-89BD-4DDF8CB745CF;2015-03-30T22:43:23Z. TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Set media certificate in transport TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Set authenticator in transport TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

CLibSMSMessageWinHttpTransport::Send: URL: server.com:443 GET /SMS_MP_AltAuth/.sms_aut?MPKEYINFORMATIONMEDIA TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

In SSL, but with no client cert TSMBootstrap 3/30/2015 2:43:23 PM 364 (0x016C)

Error. Received 0x80072ee2 from WinHttpSendRequest. TSMBootstrap 3/30/2015 2:43:45 PM 364 (0x016C)

connect (sock, (struct sockaddr *) &SockAddrIn, sizeof (struct sockaddr_in)) == 0, HRESULT=8007274c (e:\qfe\nts\sms\framework\osdmessaging\libsmsmessaging.cpp,728) TSMBootstrap 3/30/2015 2:44:06 PM 364 (0x016C)

socket 'connect' failed; 8007274c TSMBootstrap 3/30/2015 2:44:06 PM 364 (0x016C)

hr, HRESULT=80072ee2 (e:\qfe\nts\sms\framework\osdmessaging\libsmsmessaging.cpp,8919) TSMBootstrap 3/30/2015 2:44:06 PM 364 (0x016C)

sending with winhttp failed; 80072ee2 TSMBootstrap 3/30/2015 2:44:06 PM 364 (0x016C)

m_pHttpTransport->Send (0, 0, pServerReply, nReplySize), HRESULT=80072ee2 (e:\qfe\nts\sms\framework\osdmessaging\libsmsmessaging.cpp,5159) TSMBootstrap 3/30/2015 2:44:06 PM 364 (0x016C)

MPKeyInformation.RequestMPKeyInformationForMedia(szTrustedRootKey), HRESULT=80072ee2 (e:\qfe\nts\sms\framework\osdmessaging\libsmsmessaging.cpp,9410) TSMBootstrap 3/30/2015 2:44:06 PM 364 (0x016C)

Failed to get information for MP: https://server.com. 80072ee2. TSMBootstrap 3/30/2015 2:44:06 PM 364 (0x016C)

sMP.length() > 0, HRESULT=80004005 (e:\qfe\nts\sms\client\tasksequence\tsmbootstrap\tsmbootstraputil.cpp,1526) TSMBootstrap 3/30/2015 2:44:06 PM 364 (0x016C)

TSMBootstrapUtil::SelectMP ( sSMSTSMP.c_str(), sMediaPfx.c_str(), sMediaGuid.c_str(), sAuthenticator.c_str(), sEnterpriseCert.c_str(), sServerCerts.c_str(), nHttpPort, nHttpsPort, bUseCRL, sSiteCode, sAssignedSiteCode, sMP, sCertificates, sX86UnknownMachineGUID, sX64UnknownMachineGUID), HRESULT=80004005 (e:\qfe\nts\sms\client\tasksequence\tsmbootstrap\tsmediawizardcontrol.cpp,907) TSMBootstrap 3/30/2015 2:44:06 PM 364 (0x016C)

Exiting TSMediaWizardControl::GetPolicy. TSMBootstrap 3/30/2015 2:44:06 PM 364 (0x016C)

pWelcomePage->m_pTSMediaWizardControl->GetPolicy(), HRESULT=80004005 (e:\qfe\nts\sms\client\tasksequence\tsmbootstrap\tsmediawelcomepage.cpp,303) TSMBootstrap 3/30/2015 2:44:06 PM 364 (0x016C)

Setting wizard error: An error occurred while retrieving policy for this computer (0x80004005). For more information, contact your system administrator or helpdesk operator. TSMBootstrap 3/30/2015 2:44:06 PM 912 (0x0390)

WelcomePage::OnWizardNext() TSMBootstrap 3/30/2015 2:44:06 PM 912 (0x0390)

Skipping Confirmation Page. TSMBootstrap 3/30/2015 2:44:06 PM 912 (0x0390)

Skipping Task Sequence Selection Page. TSMBootstrap 3/30/2015 2:44:06 PM 912 (0x0390)

Skipping Variables Selection Page. TSMBootstrap 3/30/2015 2:44:06 PM 912 (0x0390)

Skipping Resolve Progress Page. TSMBootstrap 3/30/2015 2:44:06 PM 912 (0x0390)

Activating Finish Page. TSMBootstrap 3/30/2015 2:44:06 PM 912 (0x0390)

Loading bitmap TSMBootstrap 3/30/2015 2:44:06 PM 912 (0x0390)

Our imaging team is responsible for creating the images, boot media, task sequences, etc. Is there a way for them to not utilize the MP in our DMZ? I realize that since the MP is https, that this is be default the priority in selecting a MP. With using boot media, it never gets to the point of listing what task sequences are available.

Or, is this related to the certificate showing as "blocked"?

I know that the error code 80072ee2 is a timeout issue, so would using either SMSTSDownloadRetryCount or SMSTSDownloadRetryDelay help?

I don't see any errors in the mpcontrol.log file

I've just started learning the whole OSD process, so any insight/advice is appreciated.

March 31st, 2015 10:01am

Hi,

Please try ping the MP<FQDN> to ensure the health and availability of the MP.

For more inforamtion, please review the links below:

Solution to OSD issue 80072ee7

http://www.danielclasson.com/80072ee/

PKI Certificate Requirements for Configuration Manager
http://technet.microsoft.com/en-us/library/gg699362.aspx

How to Export Certificates For Use With Operating System Deployment:
http://technet.microsoft.com/en-us/library/bb632961.aspx

Import the exported certificate (.pfx) in ConfigMgr Distribution Point Properties. Refer below article.
http://technet.microsoft.com/en-us/library/gg682115.aspx#BKMK_ModifyDistributionPointSettings

Free Windows Admin Tool Kit Click here and download it now

April 2nd, 2015 3:52am

This topic is archived. No further replies will be accepted.