SCCM Client installation randomness - Getting WINHTTP_CALLBACK_STATUS_FLAG_SECUR ITY_CHANNEL_ERROR
Over the past several weeks, I have built about a dozen new machines - mostly Windows 7, but a few Windows 2008 R2 servers as well. All the machines get the SCCM Client, and install it, however a few of them don't show up in the SCCM Management Console
as installed (Client = 'No'). These are all clean installs - some work, some don't. I am farily confident all my certs are correct since it does work on some machines, but not others. On the machines where it is not working, I have been seeing
this set of errors in the ccmsetup.log file:
<![LOG[Using the certificate issued to 'TURING.MYDOMAIN.COM'.]LOG]!><time="15:17:26.868+300" date="12-15-2010" component="ccmsetup" context="" type="0" thread="3484" file="ccmcert.cpp:3631">
<![LOG[[CCMSETUP] AsyncCallback(): -----------------------------------------------------------------]LOG]!><time="15:17:27.407+300" date="12-15-2010" component="ccmsetup" context="" type="3" thread="3484" file="ccmsetup.cpp:1877">
<![LOG[[CCMSETUP] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered]LOG]!><time="15:17:27.407+300" date="12-15-2010" component="ccmsetup" context="" type="3" thread="3484" file="ccmsetup.cpp:1878">
<![LOG[[CCMSETUP] : dwStatusInformationLength is 4
]LOG]!><time="15:17:27.407+300" date="12-15-2010" component="ccmsetup" context="" type="3" thread="3484" file="ccmsetup.cpp:1879">
<![LOG[[CCMSETUP] : *lpvStatusInformation is 0x80000000
]LOG]!><time="15:17:27.407+300" date="12-15-2010" component="ccmsetup" context="" type="3" thread="3484" file="ccmsetup.cpp:1880">
<![LOG[[CCMSETUP] : WINHTTP_CALLBACK_STATUS_FLAG_SECURITY_CHANNEL_ERROR is set
]LOG]!><time="15:17:27.407+300" date="12-15-2010" component="ccmsetup" context="" type="3" thread="3484" file="ccmsetup.cpp:1908">
<![LOG[[CCMSETUP] AsyncCallback(): -----------------------------------------------------------------]LOG]!><time="15:17:27.407+300" date="12-15-2010" component="ccmsetup" context="" type="3" thread="3484" file="ccmsetup.cpp:1910">
<![LOG[Failed to send HTTP request. (Error at WinHttpSendRequest: 12175)]LOG]!><time="15:17:27.408+300" date="12-15-2010" component="ccmsetup" context="" type="2" thread="3484" file="ccmsetup.cpp:5901">
<![LOG[DownloadFileByWinHTTP encountered an unrecoverable error.]LOG]!><time="15:17:27.408+300" date="12-15-2010" component="ccmsetup" context="" type="3" thread="3484" file="ccmsetup.cpp:5948">
<![LOG[A Fallback Status Point has not been specified. Message with STATEID='308' will not be sent.]LOG]!><time="15:17:27.408+300" date="12-15-2010" component="ccmsetup" context="" type="1" thread="3484" file="ccmsetup.cpp:9330">
If I open the Config Manager on the clients, all the information looks correct, except I am missing two tabs, and the information on the Actions tab. The machines having the problem only have two actions (Machine Policy Rereival & Eval Cycle
and User Policy Retrieval & Eval Cycle). For the machines where things ARE working properly, there are 11 actions listed and two additional tabs: Configurations and Updates.
I have been trying to figure this out for a couple weeks, and it is driving me insane!
Thanks,
Bob
December 15th, 2010 3:44pm