MP secondary site failure http error 12030
I have installed a secondary site and all components are running except for the MP.
I see the following in the mpcontrol.log
CryptVerifyCertificateSignatureEx returned error 0x80090006. SMS_MP_CONTROL_MANAGER 12/30/2010 6:37:50 PM 3192 (0x0C78)
Certificate has "SSL Client Authentication" capability. SMS_MP_CONTROL_MANAGER 12/30/2010 6:37:50 PM 3192 (0x0C78)
Call to HttpSendRequestSync failed for port 443 with an error code. SMS_MP_CONTROL_MANAGER 12/30/2010 6:37:50 PM 3192 (0x0C78)
Http test request failed, error code is 12030. SMS_MP_CONTROL_MANAGER 12/30/2010 6:37:50 PM 3192 (0x0C78)
Successfully performed Management Point availability check against local computer. SMS_MP_CONTROL_MANAGER 12/30/2010 6:37:50 PM 3192 (0x0C78)
MP Control Manager detected MP is not responding to HTTP requests. The http error is 12030.
MP_getauth.log shows
CMPDBConnection::Init(): IDBInitialize::Initialize() failed with 0x80004005 MP_GetAuth_ISAPI 12/30/2010 6:32:59 PM 5056 (0x13C0)
======================================= MP_GetAuth_ISAPI 12/30/2010 6:32:59 PM 5056 (0x13C0)
MPDB ERROR - CONNECTION PARAMETERS
SQL Server Name : SQL01
SQL Database Name : SMS_001
Integrated Auth : True
MPDB ERROR - EXTENDED INFORMATION
MPDB Method : Init()
MPDB Method HRESULT : 0x80004005
Error Description : null
OLEDB IID : null
ProgID : null
MPDB ERROR - INFORMATION FROM DRIVER
null MP_GetAuth_ISAPI 12/30/2010 6:32:59 PM 5056 (0x13C0)
=======================================
MP_GetAuth_ISAPI 12/30/2010 6:32:59 PM 5056 (0x13C0)
IISlog shows
2010-12-30 17:56:07 192.168.7.13 CCM_POST /ccm_system/request - 443 - 192.168.7.49 ccmhttp 500 0 0 23
December 30th, 2010 1:02pm
did you check this post -
http://social.technet.microsoft.com/Forums/en-US/configmgrsetup/thread/013743fa-9cfc-4bc6-b7fd-384c5c8f5213/Kent Agerlund | My blogs: http://blog.coretech.dk/author/kea/ and http://scug.dk/ | Twitter @Agerlund | Linkedin: /kentagerlund
Free Windows Admin Tool Kit Click here and download it now
December 30th, 2010 1:09pm
I installed IIS on a clean machine.. I now have to deinstall IIS? nice Job MS .. I did two installs using MS documentation and both fail at first!
I used the MPTroubleshooter and all seems to work except ..
-
<Name xmlns="Test MPLIST HTTP
or HTTPS request functionality.">
-
<Result xmlns="Failed">
<Comment
xmlns="Exception Message:Fail to retrieve the content in [HTTPS://SECSITESERVER:443/SMS_MP/.SMS_AUT?MPLIST] with certificate:[D:\TEST.CER].
Exception Message:The underlying connection was closed: An unexpected error occurred on a send.a) Create and Configurate Certificate for native mode: For Windows Server 2003: http://technet.microsoft.com/en-us/library/bb694035.aspx For Windows Server 2008:
http://technet.microsoft.com/en-us/library/cc872789.aspx b) Export the client certificate from MMC tools' Certificates to file in X.509 format without username and password. The exported file is the client certificate needed in this program."
/>
I also noticed that changing the binding caused WSUS console no longer to function...
This is bad advertisment for MS as IIS has to be installed twice if you want to use it.
December 30th, 2010 2:21pm
Is the IIS configured as mentioned in the MS articles? The issue seems to be with the certificate on the IIS.
http://technet.microsoft.com/en-us/library/bb694035.aspx
or
http://technet.microsoft.com/en-us/library/cc872789.aspx
<LA1976> wrote in message
news:d3c579dd-de95-4380-aa2e-2f60a3546212@communitybridge.codeplex.com...
I installed IIS on a clean machine.. I now have to deinstall IIS? nice Job MS .. I did two installs using MS documentation and both fail at first!
I used the MPTroubleshooter and all seems to work except ..
-
<Name xmlns="Test MPLIST HTTP
or HTTPS request functionality.">
-
<Result xmlns="Failed">
<Comment
xmlns="Exception Message:Fail to retrieve the content in [HTTPS://SECSITESERVER:443/SMS_MP/.SMS_AUT?MPLIST] with certificate:[D:\TEST.CER].
Exception Message:The underlying connection was closed: An unexpected error occurred on a send.a) Create and Configurate Certificate for native mode: For Windows Server 2003: http://technet.microsoft.com/en-us/library/bb694035.aspx For Windows Server 2008:
http://technet.microsoft.com/en-us/library/cc872789.aspx b) Export the client certificate from MMC tools' Certificates to file in X.509 format without username and password. The exported file is the client certificate needed in this program."
/>
I also noticed that changing the binding caused WSUS console no longer to function...
This is bad advertisment for MS as IIS has to be installed twice if you want to use it.
Regards, Madan
Free Windows Admin Tool Kit Click here and download it now
December 30th, 2010 3:26pm
I found that the certificate template was used had the netbios name in subject and DNS name in SAN..
I removed WSUS left DB .. Removed the MP and changed DP to not bits enabled. waited to finish this then removed IIS completely.
Reinstalling IIS and all requirments added the ssl cert according to technet.. rebooted.. then checked with MP troubleshooter post install check all green.
Added all components again did again a check with mpcontrol.log and mp troubleshooter still all green.
What I also not this time is change the bindings from all unassigned to the ip of the server..
December 31st, 2010 10:08am