Hi,

I am seeing errors in client logs where SCCM client cannot post to internet MP.. These clients are remote and using PKI to connect to MP.

ccmmessaging.log

Enable impersonation over HTTPS for SCCM.INTERNET.COM. CcmMessaging 4/11/2015 8:55:21 AM 8284 (0x205C)
Trying without proxy. CcmMessaging 4/11/2015 8:55:26 AM 8284 (0x205C)
Received a proxy error(0x2ee2), recycling the request object and will try another proxy type, if available. CcmMessaging 4/11/2015 8:55:47 AM 8284 (0x205C)
Post to https://SCCM.INTERNET.COM/ccm_system_Windowauth/request failed with 0x87d00231. CcmMessaging 4/11/2015 8:55:47 AM 8284 (0x205C)

ClientIDManagerStartup.log

[RegTask] - Client is not registered. Sending registration request for GUID:xxxxxx-xxxxx--xxxxx ... ClientIDManagerStartup 4/6/2015 4:50:14 PM 9672 (0x25C8)
RegTask: Failed to send registration request message. Error: 0x87d00231 ClientIDManagerStartup 4/6/2015 4:50:14 PM 9672 (0x25C8)
RegTask: Failed to send registration request. Error: 0x87d00231 ClientIDManagerStartup 4/6/2015 4:50:14 PM 9672 (0x25C8)

ClientLocation.log

Failed to submit event to the Status Agent. Attempting to create pending event.

LocationServices.log

Sending message to endpoint 'raw:httpssync:SCCM.INTERNET.COM:MP_LocationManager' LocationServices 4/11/2015 9:16:36 AM 3692 (0x0E6C)
Failed to send management point list Location Request Message to SCCM.INTERNET.COM LocationServices 4/11/2015 9:17:02 AM 3692 (0x0E6C)
LSUpdateInternetManagementPoints: Failed to retrieve internet MPs from MP SCCM.INTERNET.COM with error 0x87d00231, retaining previous list. LocationServices 4/11/2015 9:17:02 AM 3692 (0x0E6C)

MP_RegistrationManager.log

Registration hint is expired. MP_RegistrationManager 4/11/2015 10:22:00 AM 8024 (0x1F58)
CCMValidateAuthHeaders failed (0x87d0029b) to validate headers for client 'GUID:xxxxxxxxx-xxxx-xxxxxx'. MP_RegistrationManager 4/11/2015 10:22:00 AM 8024 (0x1F58)

Based on above errors, anyone has any recommendation?

TIA

0x2ee2 = "The operation timed out"

0x87d00231 = "Transient error"

These are indicative of a network communication issue outside the control or purview of ConfigMgr. If the traffic doesn't make it from the client to the site system, there's no way for the client to know why, only that it didn't receive a response. You'll have to figure out why the traffic isn't making it by tracing it through the various components in between the client and the site system.

That is great! thank you... Any suggestion on errors shown in MP log...

CCMValidateAuthHeaders failed (0x87d0029b) to validate headers for client 'GUID:xxxxxxxxx-xxxx-xxxxxx'. MP_RegistrationManager 4/11/2015 10:22:00 AM 8024 (0x1F58)

Thanks

That's most likely totally unrelated. You need to find the client corresponding to the GUID and see if its having any issues.

Every other GUID is showing this error. I will see if I can logon to any of the machine since all of them appear to be remote machines connected via internet.