I'm not exactly sure which forum heading this should go under so if this isn't correct please let me know or move it on my behalf.  

So I am trying to setup Internet Based Client Management in SCCM 2012 R2 and have come across a few articles on how to do so.   I think I have mostly gotten it to work but I seem to be having a client issue when deploying new machines.  My already deployed servers seem to have picked up the PKI setting no problem.  In the past when I would deploy a new windows client everything would be fine.  When i converted over to PKI in my test environment I am now having issues when I go to deploy a new windows client. I don't get all of the Actions listed in the Configuration Manager control panel.  All I have are Discovery Data Collection, Machine Policy Retrieval and Eval, User Policy Retrieval and Eval, and Windows Installer Source list Update Cycles, before all of them would populate no problem.  I have let this machine sit here for several hours and nothing has changed yet.  It does say PKI for client certificate.  Sometimes when I would deploy new machines it would say NONE for Client certificate.  In my production environment it says self-signed.  I have found if i uninstall the client and re-install the client it does populate all of the cycles but I don't understand why it is not working on deployment.

Ok so maybe not all the time that when i reinstall the client it fixes it.  I just did an uninstall and reinstall on a test client and all it has under actions are machine and user policy cycles.

Does anyone have any ideas?

• Edited by ventura_techtvman Thursday, April 16, 2015 9:14 PM more info

Hi,

Please share ccmsetup.log.

And how do you deploy the certificate, GPO or anything else?

Are you deploying client during OSD or just to new compuers?

The certificate is deployed with a GPO and the clients are getting deployed during OSD.

Where can I upload the log to?  It is too large to post in text format in this post.

I just deployed another fresh vm and while the client gets installed the first thing i notice is that the client certificate says none and the only actions listed are: application deployment eval cycle, machine policy retrieval and eval cycle, software updates deployment eval cycle, software updates scan cycle, and user policy retrieval and eval cycle.

• Edited by ventura_techtvman 17 hours 56 minutes ago

The certificate is deployed with a GPO and the clients are getting deployed during OSD.

Where can I upload the log to?  It is too large to post in text format in this post.

I just deployed another fresh vm and while the client gets installed the first thing i notice is that the client certificate says none and the only actions listed are: application deployment eval cycle, machine policy retrieval and eval cycle, software updates deployment eval cycle, software updates scan cycle, and user policy retrieval and eval cycle.

• Edited by ventura_techtvman Monday, April 20, 2015 1:51 PM

That sounds like that the client doesn't have a valid certificate available. Check for more details the ClientIDManagerStartup.log log.

The only thing I see in red in the ClientIDManagerStartup.log is this about three times in the log file:

Failed to open to WMI namespace '\\.\root\ccmvdi' (8007045b)

Is there someplace recommended I could upload my log files to?

The clients aren't in provisioningmode after OSD are they?

I'm not sure, how do I tell?

Hi,

I think SCCM client installed before the GPO applied, so you don't a certificate available when it is required.

You can export and import the certificate by using MDT integration, try this blog for PKI part:

How To: Build and Capture in Configuration Manager 2012 using HTTPS

And in addition, you can upload the log to your onedrive so you can share with us.

Here are my log files:

ccmsetup

clientidmanagerstartup

• Edited by ventura_techtvman 18 hours 27 minutes ago

Here are my log files:

ccmsetup

clientidmanagerstartup

• Edited by ventura_techtvman Wednesday, April 22, 2015 1:19 PM

Has anyone had a chance to take a look at my log files?

ccmsetup shows success and ClientIDManagerStartup.log does not contain the part where the registration should happen. Zip all logs and upload them to Onedrive.

Heres the updated link with them zipped.

https://onedrive.live.com/redir?resid=AB64689DB97FFF8D!29211&authkey=!ABd_PTbcxYlHAxY&ithint=file%2czip

*All* logs. The zip only contains two.

Sorry, didnt see that, i figured you meant you wanted them in zip format because it might have been easier to download.

Here are the logs for ccmsetup.  If you are talking all logs like all logs in the ccm folder let me know and ill upload those as well but I assume you just mean ccm setup logs

https://onedrive.live.com/redir?resid=AB64689DB97FFF8D!29221&authkey=!AA4BzUDUQZpMvVo&ithint=file%2czip

Where those the logs you wanted?

Did you get a chance to look at the logs?

I'm not sure what the issue is that I am having but hopefully someone can help me with this issue because I don't want to implement this into production and start having client issues with deployments.

Where those the logs you wanted?

No. Logs from %windir%\ccm\logs are needed. 

Here are those logs.

https://onedrive.live.com/redir?resid=AB64689DB97FFF8D!29222&authkey=!AFLOjybptJARNnI&ithint=file%2czip

Did you find anything in those set of logs?

Hope that is the correct set of logs.

• Edited by ventura_techtvman 18 hours 34 minutes ago