So we've deployed 2012 in our Dev and Lab environments. Our Dev build, our deployment process works fine. Lab was setup in what we think the same way, but deploying an OS fails. We are exporting our build using bootable media and booting off a USB key drive. All of our certificates are valid and have been triple checked just to be sure. When we deploy a Dev OS, in the SMSTS.log we see the line "Loading Media Variables from "F:\sms\data\variables.dat"" and then below that, the line "Root CA Public Certs=XXXXXX..." with the certificate information. In lab, see the same two lines, however the cert information is blank. Which is what I'm assuming the problem is but cannot figure out for the life of me how that information is imported into that variables.dat. However, where I assume that option is, is when we're creating the boot media, under the security option, we import the pki cert along with the password. We've tried creating different certs and trying them, but no matter what that "Root CA Public Certs=" variable is empty.

Under "Client Computer Communication" the trusted root certification has our root CA information added. the CRL check box is not checked, but we've tried it both ways and it makes no difference. We are setup in HTTPS only mode. 

If anyone can suggest anything else we can try/change, please let me know.

As always thanks in advance!

Scott

Here are the logs just in case this is what people need to reply to the message...! :)

LOGGING: Finalize process ID set to 760 TSBootShell 7/31/2012 12:34:18 PM 764 (0x02FC)
==============================[ TSBootShell.exe ]============================== TSBootShell 7/31/2012 12:34:18 PM 764 (0x02FC)
Succeeded loading resource DLL 'X:\sms\bin\x64\1033\TSRES.DLL' TSBootShell 7/31/2012 12:34:18 PM 764 (0x02FC)
Debug shell is enabled TSBootShell 7/31/2012 12:34:18 PM 764 (0x02FC)
Waiting for PNP initialization... TSBootShell 7/31/2012 12:34:18 PM 772 (0x0304)
Booted from removable media TSBootShell 7/31/2012 12:34:18 PM 772 (0x0304)
Checking for "F:\SOURCES\BOOT.WIM" TSBootShell 7/31/2012 12:34:18 PM 772 (0x0304)
Found F:\SOURCES\BOOT.WIM TSBootShell 7/31/2012 12:34:18 PM 772 (0x0304)
Found config path F:\ TSBootShell 7/31/2012 12:34:18 PM 772 (0x0304)
Booting from removable media, not restoring bootloaders on hard drive TSBootShell 7/31/2012 12:34:18 PM 772 (0x0304)
Executing command line: wpeinit.exe -winpe TSBootShell 7/31/2012 12:34:18 PM 772 (0x0304)
The command completed successfully. TSBootShell 7/31/2012 12:34:26 PM 772 (0x0304)
Starting DNS client service. TSBootShell 7/31/2012 12:34:26 PM 772 (0x0304)
Executing command line: X:\sms\bin\x64\TsmBootstrap.exe /env:WinPE /configpath:F:\ TSBootShell 7/31/2012 12:34:26 PM 772 (0x0304)
The command completed successfully. TSBootShell 7/31/2012 12:34:26 PM 772 (0x0304)
==============================[ TSMBootStrap.exe ]============================== TSMBootstrap 7/31/2012 12:34:26 PM 220 (0x00DC)
Command line: X:\sms\bin\x64\TsmBootstrap.exe /env:WinPE /configpath:F:\ TSMBootstrap 7/31/2012 12:34:26 PM 220 (0x00DC)
Succeeded loading resource DLL 'X:\sms\bin\x64\1033\TSRES.DLL' TSMBootstrap 7/31/2012 12:34:26 PM 220 (0x00DC)
Succeeded loading resource DLL 'X:\sms\bin\x64\TSRESNLC.DLL' TSMBootstrap 7/31/2012 12:34:26 PM 220 (0x00DC)
Failed to open PXE registry key. Not a PXE boot. TSMBootstrap 7/31/2012 12:34:26 PM 220 (0x00DC)
Media Root = F:\ TSMBootstrap 7/31/2012 12:34:26 PM 220 (0x00DC)
Executing from Media in WinPE TSMBootstrap 7/31/2012 12:34:26 PM 220 (0x00DC)
Verifying Media Layout. TSMBootstrap 7/31/2012 12:34:26 PM 220 (0x00DC)
MediaType = BootMedia TSMBootstrap 7/31/2012 12:34:26 PM 220 (0x00DC)
PasswordRequired = false TSMBootstrap 7/31/2012 12:34:26 PM 220 (0x00DC)
Found network adapter "Microsoft Virtual Machine Bus Network Adapter" with IP Address 152.140.10.150. TSMBootstrap 7/31/2012 12:34:26 PM 220 (0x00DC)
Running Wizard in Interactive mode TSMBootstrap 7/31/2012 12:34:26 PM 220 (0x00DC)
Loading Media Variables from "F:\sms\data\variables.dat" TSMBootstrap 7/31/2012 12:34:26 PM 220 (0x00DC)
no password for vars file TSMBootstrap 7/31/2012 12:34:26 PM 220 (0x00DC)
Activating Welcome Page. TSMBootstrap 7/31/2012 12:34:26 PM 220 (0x00DC)
Loading bitmap TSMBootstrap 7/31/2012 12:34:26 PM 220 (0x00DC)
WelcomePage::OnWizardNext() TSMBootstrap 7/31/2012 12:34:29 PM 220 (0x00DC)
Loading Media Variables from "F:\sms\data\variables.dat" TSMBootstrap 7/31/2012 12:34:29 PM 220 (0x00DC)
no password for vars file TSMBootstrap 7/31/2012 12:34:29 PM 220 (0x00DC)
Spawned thread 832 to download policy. TSMBootstrap 7/31/2012 12:34:29 PM 220 (0x00DC)
Entering TSMediaWizardControl::GetPolicy. TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Environment scope "Global\{51A016B6-F0DE-4752-B97C-54E6F386A912}" successfully created TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Environment scope "Global\{BA3A3900-CA6D-4ac1-8C28-5073AFC22B03}" successfully created TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting LogMaxSize to 1000000 TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting LogMaxHistory to 1 TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting LogLevel to 0 TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting LogEnabled to 1 TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting LogDebug to 1 TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Loading variables from the Task Sequencing Removable Media. TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Loading Media Variables from "F:\sms\data\variables.dat" TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting SMSTSLocationMPs TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSMediaGuid TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSBootMediaPackageID TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSBootMediaSourceVersion TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSBrandingTitle TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSCertSelection TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSCertStoreName TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSDiskLabel1 TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSHTTPPort TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSHTTPSPort TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSIISSSLState TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSLaunchMode TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSMediaPFX TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSMediaSetID TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSMediaType TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSPublicRootKey TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSRootCACerts TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSSiteCode TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSSiteSigningCertificate TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSSupportUnknownMachines TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSTimezone TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Setting _SMSTSUseFirstCert TS environment variable TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Root CA Public Certs= TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Missing root CA environment variable from variables file TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Custom hook from X:\\TSConfig.INI is TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
No hook is found to be executed before downloading policy TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Authenticator from the environment is empty. TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Need to create Authenticator Info using PFX TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Using user-defined MP locations: https://SERVERNAME TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Set authenticator in transport TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Set media certificates in transport TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
IP: 152.140.10.150 152.140.10.0 TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
CLibSMSMessageWinHttpTransport::Send: URL: SERVERNAME:443  GET /SMS_MP_AltAuth/.sms_aut?MPLOCATION&ir=152.140.10.150&ip=152.140.10.0 TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
In SSL, but with no client cert TSMBootstrap 7/31/2012 12:34:29 PM 832 (0x0340)
Executing command line: X:\windows\system32\cmd.exe /k TSBootShell 7/31/2012 12:34:30 PM 764 (0x02FC)
The command completed successfully. TSBootShell 7/31/2012 12:34:30 PM 764 (0x02FC)
Successfully launched command shell. TSBootShell 7/31/2012 12:34:30 PM 764 (0x02FC)
[TSMESSAGING] AsyncCallback(): ----------------------------------------------------------------- TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
[TSMESSAGING] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
[TSMESSAGING]                : dwStatusInformationLength is 4
TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
[TSMESSAGING]                : *lpvStatusInformation is 0x8
TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
[TSMESSAGING]            : WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set
TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
[TSMESSAGING] AsyncCallback(): ----------------------------------------------------------------- TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
Error. Received 0x80072f8f from WinHttpSendRequest. TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
hr, HRESULT=80072f8f (e:\nts_sccm_release\sms\framework\osdmessaging\libsmsmessaging.cpp,8738) TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
sending with winhttp failed; 80072f8f TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
m_pHttpTransport->Send (0, 0, pServerReply, nReplySize), HRESULT=80072f8f (e:\nts_sccm_release\sms\framework\osdmessaging\libsmsmessaging.cpp,5435) TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
CCM::SMSMessaging::CLibSMSMPLocation::RequestMPLocation failed; 0x80072f8f TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
MPLocation.RequestMPLocation (szTrustedRootKey, sIPSubnets.c_str(), sIPAddresses.c_str(), sSiteCode, sAssignedSiteCode, sMP, sMPCertificates, sX86UnknownMachineGUID, sX64UnknownMachineGUID), HRESULT=80072f8f (e:\nts_sccm_release\sms\framework\osdmessaging\libsmsmessaging.cpp,9320) TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
CCM::SMSMessaging::GetMPLocation failed; 0x80072f8f TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
Failed to query https://SERVERNAME for MP location TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
New settings: TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
    site=,, MP=, ports: http=80,https=443 TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
Set authenticator in transport TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
pszSiteCode && pszSiteCode[0], HRESULT=80070057 (e:\nts_sccm_release\sms\framework\tscore\tspolicy.cpp,567) TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
TS::Policy::GetClientIdentity (&httpTransport, sSiteCode.c_str(), sMediaGuid.c_str(), sClientGUID, sNetbiosName, bUnknown, sServerName, sServerRemoteName, sImportedClientIdentity), HRESULT=80070057 (e:\nts_sccm_release\sms\client\tasksequence\tsmbootstrap\tsmediawizardcontrol.cpp,932) TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
Exiting TSMediaWizardControl::GetPolicy. TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
pWelcomePage->m_pTSMediaWizardControl->GetPolicy(), HRESULT=80070057 (e:\nts_sccm_release\sms\client\tasksequence\tsmbootstrap\tsmediawelcomepage.cpp,303) TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
Setting wizard error: An error occurred while retrieving policy for this computer  (0x80070057). For more information, contact your system administrator or helpdesk operator. TSMBootstrap 7/31/2012 12:34:45 PM 220 (0x00DC)
WelcomePage::OnWizardNext() TSMBootstrap 7/31/2012 12:34:45 PM 220 (0x00DC)
Skipping Confirmation Page. TSMBootstrap 7/31/2012 12:34:45 PM 220 (0x00DC)
Skipping Task Sequence Selection Page. TSMBootstrap 7/31/2012 12:34:45 PM 220 (0x00DC)
Skipping Variables Selection Page. TSMBootstrap 7/31/2012 12:34:45 PM 220 (0x00DC)
Skipping Resolve Progress Page. TSMBootstrap 7/31/2012 12:34:45 PM 220 (0x00DC)
Activating Finish Page. TSMBootstrap 7/31/2012 12:34:45 PM 220 (0x00DC)
Loading bitmap TSMBootstrap 7/31/2012 12:34:45 PM 220 (0x00DC)

Error. Received 0x80072f8f from WinHttpSendRequest means there was a security error when communicating with the MP. How exactly are you creating the certificate for the bootable media? It has to be in a specific format and it sounds like that is the problem. Below is from the SCCM 2012 documentation library.

This certificate must be exported in a Public Key Certificate Standard (PKCS #12) format, and the password must be known so that it can be imported into the Configuration Manager boot images.

You are using a dynamic boot media and the TS client asked the MP for the site where it belongs, and the MP did not find any.

For dynamic boot media, you need to create IP boundaries that include your clients and assign those boundaries to your site.

Thank you both for the suggestions. The cert was created properly. Have verified that extensively. As to Kerwin's option, I felt VERY strongly that this is where my issue was. Went through, set all the boundaries up, got past the usual error message to get a new error that had to deal with the network access account. Double checked that it wasnt locked and reset the password just to be sure. Redistributed the boot image, recreated the boot media, and sure enough back to the old error message. I've opened up a ticked with Microsoft and as of right now they seem stumped. Once I get the issue resolved, I'll update the post here with what we did to fix it. Thanks again for your help!

Scott

The client does not trust the CA that signed the MP certificate. You need supply the root CA cert for you site. Once you have done that, you need to re-create your boot media.

[TSMESSAGING] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered TSMBootstrap 7/31/2012 12:34:45 PM 832 (0x0340)
[TSMESSAGING]                : dwStatusInformationLength is 4
TSMBootstrap  7/31/2012 12:34:45 PM 832 (0x0340)
[TSMESSAGING]                : *lpvStatusInformation is 0x8
TSMBootstrap  7/31/2012 12:34:45 PM 832 (0x0340)
[TSMESSAGING]            : WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set
TSMBootstrap  7/31/2012 12:34:45 PM 832 (0x0340)

The root CA is specified. The cert it self says its valid.
 

You need to re-create your boot media after you have added the root CA certs.

Yep have done that to. as well as re-distributed it. 

You are talking about the boot image. I am talking about re-creating your CD/DVD or USB boot media.

I've done that as well. Many, many times. 

When you re-created the media, does the media-creation log have the lines for the root CA certs?

Im not 100% sure if this is what i should be looking for but this is all the info from that log that had cert information in it:

======= SerializeCertFromFile ======= CreateTsMedia 8/7/2012 1:32:31 PM 4524 (0x11AC)
======= SerializeCertFromFile ======= CreateTsMedia 8/7/2012 1:32:31 PM 4524 (0x11AC)

and

Staging certificate CreateTsMedia 8/7/2012 1:33:56 PM 3132 (0x0C3C)
Media certificate registered with site CreateTsMedia 8/7/2012 1:33:56 PM 3132 (0x0C3C)
State has been executed. CreateTsMedia 8/7/2012 1:33:56 PM 3132 (0x0C3C)

Okay so I have a new detail. When I've been creating the media, I have been selecting Dynamic Media but this time I tried site-based media. Sure enough as soon as I told it to select a specific DP, it had the Cert information in it. I went back and tried dynamic again, just to be sure, and once again, no cert info. Anyone think of any ideas as to why this would be? 

I have a similar issue - I'm having no problems booting to PXE/WDS, but when I create a task sequence ISO, and specify the exact same certificate as is being used for my distribution points, I get the same certificate/CA error that Scott is seeing. I've confirmed root CA certificates are specified in ConfigMgr, updated boot images and repushed to distribution points, confirmed my certificate has a subject and a description (as I've seen that cause problems in the past), etc. This is going to be a showstopper shortly in my environment...I can't figure out why I would be able to successfully boot to PXE, but not to boot media. If my root CA certs weren't in place, or boot images weren't up to date, or certificates weren't valid, I wouldn't be able to do either, right? I have also attempted to generate boot media that's not dynamic, and specifies a particular MP, as Scott mentiones above, and it *does not* work for me. Same error as with Dynamic Media.

There are no errors in my CreateTsMedia log file, and I have the following errors in my smstslog log file:

<![LOG[Root CA Public Certs=]LOG]!><time="08:38:47.254+480" date="08-15-2012" component="TSMBootstrap" context="" type="1" thread="848" file="tsmediawizardcontrol.cpp:591">
<![LOG[Missing root CA environment variable from variables file]LOG]!><time="08:38:47.254+480" date="08-15-2012" component="TSMBootstrap" context="" type="1" thread="848" file="tsmediawizardcontrol.cpp:597">
<![LOG[Custom hook from X:\\TSConfig.INI is ]LOG]!><time="08:38:47.254+480" date="08-15-2012" component="TSMBootstrap" context="" type="1" thread="848" file="tsmediawizardcontrol.cpp:646">
<![LOG[No hook is found to be executed before downloading policy]LOG]!><time="08:38:47.254+480" date="08-15-2012" component="TSMBootstrap" context="" type="1" thread="848" file="tsmediawizardcontrol.cpp:670">
<![LOG[Authenticator from the environment is empty.]LOG]!><time="08:38:47.270+480" date="08-15-2012" component="TSMBootstrap" context="" type="1" thread="848" file="tsmediawizardcontrol.cpp:809">
<![LOG[Need to create Authenticator Info using PFX]LOG]!><time="08:38:47.270+480" date="08-15-2012" component="TSMBootstrap" context="" type="1" thread="848" file="tsmediawizardcontrol.cpp:821">
<![LOG[Using user-defined MP locations: https://CHI-SCPRIW1.w2k.jumptrading.com]LOG]!><time="08:38:47.285+480" date="08-15-2012" component="TSMBootstrap" context="" type="1" thread="848" file="tsmediawizardcontrol.cpp:878">
<![LOG[Set authenticator in transport]LOG]!><time="08:38:47.285+480" date="08-15-2012" component="TSMBootstrap" context="" type="1" thread="848" file="libsmsmessaging.cpp:7592">
<![LOG[Set media certificates in transport]LOG]!><time="08:38:47.301+480" date="08-15-2012" component="TSMBootstrap" context="" type="1" thread="848" file="libsmsmessaging.cpp:9295">
<![LOG[IP: 10.2.119.36 10.2.119.0]LOG]!><time="08:38:47.301+480" date="08-15-2012" component="TSMBootstrap" context="" type="1" thread="848" file="libsmsmessaging.cpp:9316">
<![LOG[CLibSMSMessageWinHttpTransport::Send: URL: CHI-SCPRIW1.w2k.jumptrading.com:443  GET /SMS_MP_AltAuth/.sms_aut?MPLOCATION&ir=10.2.119.36&ip=10.2.119.0]LOG]!><time="08:38:47.301+480" date="08-15-2012" component="TSMBootstrap" context="" type="1" thread="848" file="libsmsmessaging.cpp:8422">
<![LOG[In SSL, but with no client cert]LOG]!><time="08:38:47.301+480" date="08-15-2012" component="TSMBootstrap" context="" type="1" thread="848" file="libsmsmessaging.cpp:8557">
<![LOG[[TSMESSAGING] AsyncCallback(): -----------------------------------------------------------------]LOG]!><time="08:38:59.672+480" date="08-15-2012" component="TSMBootstrap" context="" type="1" thread="848" file="libsmsmessaging.cpp:606">
<![LOG[[TSMESSAGING] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered]LOG]!><time="08:38:59.672+480" date="08-15-2012" component="TSMBootstrap" context="" type="3" thread="848" file="libsmsmessaging.cpp:607">
<![LOG[[TSMESSAGING]                : dwStatusInformationLength is 4
]LOG]!><time="08:38:59.672+480" date="08-15-2012" component="TSMBootstrap" context="" type="3" thread="848" file="libsmsmessaging.cpp:608">
<![LOG[[TSMESSAGING]                : *lpvStatusInformation is 0x8
]LOG]!><time="08:38:59.672+480" date="08-15-2012" component="TSMBootstrap" context="" type="3" thread="848" file="libsmsmessaging.cpp:609">
<![LOG[[TSMESSAGING]            : WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set
]LOG]!><time="08:38:59.672+480" date="08-15-2012" component="TSMBootstrap" context="" type="3" thread="848" file="libsmsmessaging.cpp:625">
<![LOG[[TSMESSAGING] AsyncCallback(): -----------------------------------------------------------------]LOG]!><time="08:38:59.672+480" date="08-15-2012" component="TSMBootstrap" context="" type="3" thread="848" file="libsmsmessaging.cpp:639">

I believe this is pretty much identical to what Scott sees...does anyone have any thoughts?

Thanks,

So I know this is a little late but I just got done with Microsoft troubleshooting this issue and with no changes being done, it just started working. They did confirm that there is a bug if you try to export a TS from the CAS it will fail. But if you do it from the Primary, it will work. They still dont know what changed on my server to randomly start making this working. Nothing like having a case open for 2+ months and still dont know the cause of it. :) Thanks again for everyones help. 

Scott

When creating task sequence media from SCCM 2012 console, make sure you are connected to primary site and not CAS site.  This worked for me.

• Proposed as answer by Mayoox 8 hours 47 minutes ago

When creating task sequence media from SCCM 2012 console, make sure you are connected to primary site and not CAS site.  This worked for me.

• Proposed as answer by Mayoox Thursday, May 28, 2015 11:00 PM

When creating task sequence media from SCCM 2012 console, make sure you are connected to primary site and not CAS site.  This worked for me.

• Proposed as answer by Mayoox Thursday, May 28, 2015 11:00 PM

Thanks Ballard1.

I spent so much time with troubleshooting the same error as mentioned above (WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set) until I found this post. It works for me perfectly. Btw, I'm experiencing the same behaviour before and after site upgrade to CU4. So it seems that MS didn't fix this bug in CU4.

• Edited by Mayoox Thursday, May 28, 2015 11:15 PM

Thanks Ballard1.

I spent so much time with troubleshooting the same error as mentioned above (WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set) until I found this post. It works for me perfectly. Btw, I'm experiencing the same behaviour before and after site upgrade to CU4. So it seems that MS didn't fix this bug in CU4.

• Edited by Mayoox Thursday, May 28, 2015 11:15 PM

Thanks Ballard1.

I spent so much time with troubleshooting the same error as mentioned above (WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set) until I found this post. It works for me perfectly. Btw, I'm experiencing the same behaviour before and after site upgrade to CU4. So it seems that MS didn't fix this bug in CU4.

• Edited by Mayoox 8 hours 32 minutes ago

Thanks Ballard1.....doing that fixed our situation as well.