Hi,
I have a single Windows Server that I'm unable to install the SCCM agent onto. It's a Win2008R2 Enterprise server with Hyper-V installed.
Our SCCM environment is R2 running in native mode. IIS and SCCM are configured to allow client installation and it has worked consistently for the other 50 Windows servers. I just have a problem with this one.
The only time I've experienced agent installation trouble is when the client hasn't enrolled for a certificate yet, or the server MP threw a wobbler. I can see that the client has a valid Client Authentication certificate, and all other servers are able to communicate with the Software Updates point.
I'm installing the client via publishing to WSUS MP, however I have also tried installing manually using the following command:
ccmsetup.exe /native /mp:SERVERFQDN SMSSITECODE=AUTO /NOSERVICE
Neither method seems to work. Windows Update detects that the agent is available for install but fails to install it with error code 1 uknown error.
The output of the CCMSETUP log is as follows (I've replaced actual servers names):
<![LOG[Ccmsetup is being restarted due to an administrative action. Installation files will be reset and downloaded again.]LOG]!><time="02:05:55.035+-60" date="06-18-2011" component="ccmsetup" context="" type="1" thread="6208" file="ccmsetup.cpp:2774">
<![LOG[Successfully ran BITS check.]LOG]!><time="02:05:55.113+-60" date="06-18-2011" component="ccmsetup" context="" type="1" thread="6208" file="ccmsetup.cpp:7105">
<![LOG[The 'Certificate Store' is empty in the registry, using default store name 'MY'.]LOG]!><time="02:05:55.113+-60" date="06-18-2011" component="ccmsetup" context="" type="1" thread="6208" file="ccmcert.cpp:204">
<![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="02:05:55.113+-60" date="06-18-2011" component="ccmsetup" context="" type="0" thread="6208"
file="ccmcert.cpp:3518">
<![LOG[2 certificate(s) found in the 'MY' certificate store.]LOG]!><time="02:05:55.113+-60" date="06-18-2011" component="ccmsetup" context="" type="0" thread="6208" file="ccmcert.cpp:3547">
<![LOG[The 'MY' of 'Local Computer' store has 2 certificate(s).
Using custom selection criteria based on the machine name.]LOG]!><time="02:05:55.113+-60" date="06-18-2011" component="ccmsetup" context="" type="0" thread="6208" file="ccmcert.cpp:3586">
<![LOG[Machine name is 'ONYX.arc.org.uk'.]LOG]!><time="02:05:55.113+-60" date="06-18-2011" component="ccmsetup" context="" type="0" thread="6208" file="ccmcert.cpp:1919">
<![LOG[SSL Registry key Software\Microsoft\CCM not found, assuming Client SSL is disabled.]LOG]!><time="02:05:55.113+-60" date="06-18-2011" component="ccmsetup" context="" type="2" thread="6208" file="ccmutillib.cpp:134">
<![LOG[The certificate issued to 'SERVER.DOMAIN.COM' has 'Client Authentication' capability.]LOG]!><time="02:05:55.129+-60" date="06-18-2011" component="ccmsetup" context="" type="0" thread="6208" file="ccmcert.cpp:432">
<![LOG[Using the certificate issued to 'SERVER.DOMAIN.COM'.]LOG]!><time="02:05:55.129+-60" date="06-18-2011" component="ccmsetup" context="" type="0" thread="6208" file="ccmcert.cpp:3631">
<![LOG[Failed to successfully complete HTTP request. (StatusCode at WinHttpQueryHeaders: 403)]LOG]!><time="02:05:55.347+-60" date="06-18-2011" component="ccmsetup" context="" type="3" thread="6208" file="ccmsetup.cpp:5969">
<![LOG[A Fallback Status Point has not been specified. Message with STATEID='308' will not be sent.]LOG]!><time="02:05:55.347+-60" date="06-18-2011" component="ccmsetup" context="" type="1" thread="6208" file="ccmsetup.cpp:9330">
This server seems to have two certificates installed - the SCCM client certificate and a Server Authentication certificate used by SCVMM. I'm not sure if that's interfering.
I've had a look at other posts on here and around the web but so far haven't had any luck. If anyone has any suggestions or has experienced this themselves I'd be greatful for the help.
Thanks,
Tim