Failed to get DP locations as the expected version from MP 'http://server1.techuisitive.com'. Is only one https client or all the client has this issue? Troubleshoot rogue PowerShell processes running from C:\Windows\CCM\SystemTemp, ConfigMgr OSD taking hours to complete due to LEDBAT misconfiguration, ConfigMgr Software Center crashing with SCClient has stopped working on Windows 10. ', Begin validation of Certificate [Thumbprint 6A5230A9641239E4489CA42559685F7358C8A0BB] issued to 'PTW01CISWB001. Have a nice day! Similar thread for your reference, the issue is due to access privileges. ', Begin validation of Certificate [Thumbprint 259ECEA46C3DAC33F0B5838C5B82E36B1BD872E3] issued to 'ptw01ciswb001. DhcpGetOriginalSubnetMask entry point is supported. Error 0x8004100e. Getupdate -failed to get targated update error= 0x87d00215 Error 0x80004005 Service Pack (0.0). Please also note that when I push client from sccm console then it does not update ccmsetup.log unless I run it manually with below logs: Current AD forest name is testlab.com, domain name is testlab.com ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)Domain joined client is in Intranet ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)DHCP entry points already initialized. Use PKI cert box checked ", The step "Testing the CMG channel for management point: 'thenameoftheMP'" gives me a new error, "Failed to refresh MP location. Error 0x87d00454 0x8004100e Next retry in 10 minute(s) ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94). Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support. privacy statement. Manually creating this registry key works and the client is now able to communicate with the MP. Root CA specified. I just completed a new SCCM Primary Site installation for a customer who has a requirement of HTTPS communication only. There are no certificates in the 'MY' store. Finding certificate by issuer chain returned error 80092004ccmsetup01/03/2019 16:38:072612 (0x0A34) Ccmsetup command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice I followed the instructions athttps://docs.microsoft.com/en-us/sccm/core/clients/manage/cmg/setup-cloud-management-gatewaywhich were pretty good and easy to follow. Error: 0x87d00215 Begin searching client certificates based on Certificate Issuers Certificate Issuer 1 [CN=domainname Root CA; OU=IS; O=domainname Co., Inc.; L=Richfield; S=MN; C=US] Certificate Issuer 2 [CN=domainname Enterprise Root 01i001] Distribution Manager requires that IIS base components be installed on the local Configuration Manager Site Server in order to create the virtual directory? The same certificate loads perfectly fine with the Go http server as per the screenshot above so it looks like the certificate is correct. Completed searching client certificates based on Certificate Issuersccmsetup01/03/2019 16:38:072612 (0x0A34) PXE-E99: Unexpected network error - SCCM OSD, Configuration Manager OSD task sequence fails with error code 0x80004005, MECM OSD Task Sequence Failed with Error 0x80072EE7, SCCM Software Distribution Troubleshooting, #SCCM #MECM #Troubleshooting #ConfigMgr #SCCMClient, SCCM Client Installation Failed With Error Code 0x87d00215. If you have feedback for TechNet Subscriber Support, contact \\winsccm.testlab.com\SMSClient ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) ccmsetup Task does not exist. ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) MapNLMCostDataToCCMCost() returning Cost 0x1ccmsetup01/03/2019 16:38:072612 (0x0A34) \\SCCM-SERVER-DAN.CORK.LOCAL\SMSClientccmsetup01/03/2019 16:38:072612 (0x0A34) Find out more about the Microsoft MVP Award Program. SCCM Native mode, CCMsetup and multiple valid certs : r/SCCM - reddit ccmsetup 6/15/2017 9:50:35 PM 2320 (0x0910) Go to C:\Windows\System32\GroupPolicy\Machine and delete Registry.pol. Failed to connect to machine policy namespace. As of 29th Jan 2019. Bonus Flashback: March 3, 1969: Apollo 9 launched (Read more HERE.) and highlight your SCCM server then right click and choose "Client Installation Settings" > Client Push Installation and click on the tab called Installation Properties you can add the MP server and site code in there. Service Pack (0.0). ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0) ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)CcmSetup failed with error code 0x80004005 ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0). Your daily dose of tech news, in brief. Sending location request to 'SCCM-Server-Dan.cork.local' with payload ' It has been sent. (Just giving HTTPS://winsccm.testlab.com/ccm_system/request, HTTPS://winsccm.testlab.com/CCM_Client/ccmsetup.cab. FromAD: FSP = SCCM-Server-Dan.cork.localccmsetup01/03/2019 16:38:072612 (0x0A34) Installation files will be reset and downloaded again. Folder 'Microsoft\Microsoft\Configuration Manager' not found. Error 0x87d00215 The below command line was used for the client installation. 3. The above error indicates that a new version of client installation source was required. Current AD forest name is cork.local, domain name is cork.localccmsetup01/03/2019 16:38:072612 (0x0A34) [] Params to send '5.0.8740.1024 Deployment Error: 0x0, 'ccmsetup01/03/2019 16:38:072612 (0x0A34) Retrieved 0 MP records from AD for site '001' ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Level 9, 440 Collins Street Melbourne, VIC 3000ABN: 47 420 502 955, document.write(new Date().getFullYear()); Endpoint Focus Trust. LocationServices 8/9/2019 11:00:28 AM 4744 (0x1288), 2 internet MP errors in the last 10 minutes, threshold is 5. Ccmsetup is being restarted due to an administrative action. No registry Running as user "SYSTEM" ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Now I have just select https or http option under site properties. CCMFIRSTCERT (Tells SCCM to use the certificate with the longest validity period). SCCM Software Updates not installing to endpoints, that SCCM site server computer account are in the Local. LocationServices01/03/2019 16:38:072612 (0x0A34) Is it a factor also for the updates not deploying to client computer? Client push installation failing : r/SCCM - reddit Client re-install error ', Completed validation of Certificate [Thumbprint 259ECEA46C3DAC33F0B5838C5B82E36B1BD872E3] issued to 'ptw01ciswb001. I'm not great with ConfigMgr logs but ADALOperationProvider.log on the endpoint comes up with "Getting AAD (device) token" with the client ID, ResourceURL, and AccountID every so often but I don't see any errors. SiteCode: 101ccmsetup01/03/2019 16:38:072612 (0x0A34) and was challenged. 16:38:072612 (0x0A34) ', Begin validation of Certificate [Thumbprint B2400DEC508EBAACE84613AE21A33F4F59683BD0] issued to 'PTW01CISWB001. Detected 52492 MB free disk space on system drive. If I use a Client certificate instead, the PFX I used to create the CMG, it has a failure on two steps. UseAzure="1" DPTokenAuth="1" UseInternetDP="0"> ENDPOINT FOCUS, the E Logo and the composite ENDPOINT FOCUS & E Logo are registered trademarks and owned by Endpoint Focus Pty Ltd as trustee for Endpoint Focus Trust. dism.exe /online /norestart /enable-feature /ignorecheck /featurename:"IIS-WebServerRole" /featurename:"IIS-WebServer" /featurename:"IIS-CommonHttpFeatures" /featurename:"IIS-StaticContent" /featurename:"IIS-DefaultDocument" /featurename:"IIS-DirectoryBrowsing" /featurename:"IIS-HttpErrors" /featurename:"IIS-HttpRedirect" /featurename:"IIS-WebServerManagementTools" /featurename:"IIS-IIS6ManagementCompatibility" /featurename:"IIS-Metabase" /featurename:"IIS-WindowsAuthentication" /featurename:"IIS-WMICompatibility" /featurename:"IIS-ISAPIExtensions" /featurename:"IIS-ManagementScriptingTools" /featurename:"MSRDC-Infrastructure" /featurename:"IIS-ManagementService". If you go to this location in the SCCM Console: Administration\Overview\Site Configuration\Sites. The 'Select First Certificate' registry entry was set to OFF so a certificate cannot be selected. Use it. Only one MP HTTPS://SCCM-Server-Dan.cork.local is specified. GetDirectoryList failed with a non-recoverable failure, 0x87d00454 ) SuiteMask = 272. Join the conversation. Failed to find accessible source. These are the errors I am getting. Task does not exist. CCMHTTPSPORT: 443 ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Are you sure that your issue is exactly as mentioned in that thread? The text was updated successfully, but these errors were encountered: This is not an grpc issue. Years ago, we had put an IIS redirect to direct users to a "prettier" CNAME for the Application Catalog's URL.Once we removed the Application Catalog roles in favor of using only Software Center, we removed the IIS redirect and our CMG started working great. ccmsetup01/03/2019 16:38:072612 (0x0A34) Aug 12 2019 LocationServices 8/9/2019 11:00:28 AM 212 (0x00D4), 3 internet MP errors in the last 10 minutes, threshold is 5. Error: Conn.resetTransport failed to create client transport: connection error: desc = "transport: x509: certificate signed by unknown authority" I know the certificate is valid, verified by running a simple Go http server: 6/15/2017 12:24:47 AM 2680 (0x0A78) Launch from folder C:\Windows\ccmsetup\ccmsetup01/03/2019 16:38:071124 (0x0464) A possible reason for this failure is the CMG connection point failed to forward the message to the management point. AM 2680 (0x0A78) I might be wrong. SOLVED FAILED TO GET TARGETED UPDATE ERROR = 0X87D00215. CCMCERTSTORE: MYccmsetup01/03/2019 16:38:072612 (0x0A34) CCMHTTPPORT: 80ccmsetup01/03/2019 16:38:072612 (0x0A34) Client re-install error Unable to find any Certificate based on Certificate Issuers Failed to get client certificate for transportation. Task does not exist. ', Based on Certificate Issuer 'domainname Enterprise Root 01i002' found Certificate [Thumbprint 6F72447F3B4EBC63F25AAB9023986F3F3FC22975] issued to 'PTW01CISWB001. State message with TopicType 800 and TopicId {ADEBF393-E5B7-487D-80B8-96EB1AFB7D59} has been sent to the FSPFSPStateMessage01/03/2019 16:38:072612 (0x0A34) After installing 1806 and configuring certificates, I started having issues with installing clients. Shutdown has been requested ccmsetup 6/15/2017 9:50:24 PM 4244 (0x1094) Error 0x87d00215 Unable to retrieve AD site membership CCMSETUP bootstrap from Internet: 0 DHCP entry points already initialized. MSI log file: C:\Windows\ccmsetup\Logs\client.msi.logccmsetup01/03/2019 16:38:072612 (0x0A34) ccmsetup ccmsetup 6/15/2017 Hope everything goes well. MPs: ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) I had installed adminconsole.msi which was failed during installation. I have checked the forums and googled for a definitive answer to this but nothing seems to work. Failed to send location message to 'HTTPS://SCCM-Server-Dan.cork.local'. No version of the client is currently detected. installed. Detected 33121 MB free disk space on system drive. FSP: SCCM-SERVER-DAN.CORK.LOCALccmsetup01/03/2019 16:38:072612 (0x0A34) Updating MDM_ConfigSetting.ClientDeploymentErrorCode with value 0ccmsetup01/03/2019 16:38:072612 (0x0A34) Failed to get client version for sending state messages. If there is any other assistance we can provide, please feel free to let us know, we will do our best to help you. DownloadFileByWinHTTP failed with error 0x87d00280 ccmsetup 6/15/2017 12:24:47 AM 2680 (0x0A78) Can somebody please give me an answer that actually worked to 'ccmsetup01/03/2019 16:38:072612 (0x0A34) This is not a supported write filter device. There are no certificates in the 'MY' store. Successfully refresh bootstrap information from AD. Client re-install error Unable to find any Certificate based on Certificate Issuers Failed to get client certificate for transportation. Config file: C:\Windows\ccmsetup\MobileClientUnicode.tcf ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) CcmSetup failed with error code 0x80004004 ccmsetup 6/15/2017 9:50:24 PM 4140 (0x102C) Source List: ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) I added a "LocalAdmin" -- but didn't set the type to admin. I am running into almost the exact same issues down to a T. @pembertjYes! CCMHTTPSSTATE: 192 ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Failed to connect to machine policy namespace. Domain joined client is in Intranetccmsetup01/03/2019 16:38:072612 (0x0A34) More info about Internet Explorer and Microsoft Edge, SOLVED FAILED TO GET TARGETED UPDATE ERROR = 0X87D00215. Params to send '5.0.8412.1004 Deployment Error: 0x0, ' ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) of certificates present in 'MY' store of 'Local Computer'. @alexandertuvstromIIS is *NOT* required on the site server, unless that site server itself hosts one of the roles that require IIS (such as the MP, DP or SUP role). ccmsetup 6/15/2017 12:24:47 AM 2680 (0x0A78) Error 0x87d00215 For example we have one SCCM 2012 that just does Windows 7 PCs and we built another one that will just be doing Windows 10. Error code = 0x80070002ccmsetup01/03/2019 16:38:072612 (0x0A34) ccmsetup01/03/2019 16:38:072612 (0x0A34) Sharing best practices for building any app with .NET. SOLVED Application installing but failing on any detection method added, uninstall works fine with no errors Uninstall Symantec Management Agent, refresh client in Microsoft Endpoint Configuration Manager console and the client immediately goes offline. I know the certificate is valid, verified by running a simple Go http server: I couldn't really find any doc showing how to setup the client properly apart from https://chromium.googlesource.com/external/github.com/grpc/grpc-go/+show/refs/heads/master/Documentation/grpc-auth-support.md. ', Completed validation of Certificate [Thumbprint C5CC8BED3777E7CE200257275E3F63E537D84ECA] issued to 'PTW01CISWB001. If you go to this location in the SCCM Console: Administration\Overview\Site Configuration\Sites. We are working every day to make sure our community is one of the best. Check next MP. Error 0x87d00281" from around when I powered on the workstation. Start machine policy retrieval in configuration manager client control, WUserver is pointing in the sccm SUP and i have run the machine policy retrieval. Check if certificate chain for the client certificate is specified to upload to the CMG service and check revocation check setting.". 6/15/2017 9:50:35 PM 3220 (0x0C94) FSP="SCCM-SERVER-DAN.CORK.LOCAL" INSTALL="ALL" MANAGEDINSTALLER="0" SMSSITECODE="101" smsmplist="HTTPS://SCCM-Server-Dan.cork.local"ccmsetup01/03/2019 16:38:072612 (0x0A34) Get our latest recommendations, advice and offers direct to your inbox. MPs:ccmsetup01/03/2019 16:38:072612 (0x0A34) ccmsetup01/03/2019 16:38:072612 (0x0A34) /config:MobileClient.tcf ccmsetup 6/15/2017 9:50:35 PM 3220 9:50:35 PM 3220 (0x0C94) Hi Team, SOLVED - Client install fails with Error 0x87d00280 on ccmsetup log file | SCCM | Configuration Manager | Intune | Windows Forums Home Forums What's new Contact Log in Register This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register. Error 0x87d00215. Welcome to the Snap! 02:27 PM. I reinstall the SCCM agent and this issue still occurs. ccmsetup 6/15/2017 12:24:47 AM 2680 (0x0A78) Checking Write Filter Status. Folder 'Microsoft\Microsoft\Configuration Manager' not found. Updating MDM_ConfigSetting.ClientDeploymentErrorCode with value 0ccmsetup01/03/2019 16:38:072612 (0x0A34) Conn.resetTransport failed to create client transport: connection error: desc = "transport: x509: certificate signed by unknown authority" with certificate generated by Let's encrypt, https://chromium.googlesource.com/external/github.com/grpc/grpc-go/+show/refs/heads/master/Documentation/grpc-auth-support.md, Error transport: x509: certificate signed by unknown authority. ', Begin validation of Certificate [Thumbprint 4E67BDA515464DE0C651562D0ABBAE688F7B7510] issued to 'PTW01CISWB001. Check if client subnet / AD Site is added in SCCM boundary. Does my CMG connection point need to be Azure AD Hybrid Joined in order to use Azure AD for client authentication? IsSslClientAuthEnabled - Determining provisioning mode state failed with 80070002. You signed in with another tab or window. LocationServices 8/9/2019 11:00:29 AM 4280 (0x10B8), Ignoring MP error during post-rotation flush period of 20 seconds. Updated security on object C:\Windows\ccmsetup\. 0x8004100eccmsetup01/03/2019 16:38:072612 (0x0A34) Here are some of the errors I was seeing in ccmsetup.log: That last point is where I focused my troubleshooting efforts on: CcmSetup failed with error code 0x80070002. IsSslClientAuthEnabled - Determining provisioning mode state failed with 80070002. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCM\Security\Select First Certificate = 1. The same settings worked for windows 10 machine but I am not sure why this is not working for windows 7 system. We are not in a write If I use a Client certificate instead, the PFX I used to create the CMG, it has a failure on two steps. CCMHTTPSCERTNAME: ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Client is on internet Ok did you configure the client push account and grant itLocal Admin rightsto the workstations. MEM clients go offline after Altiris / Symantec Management Agent get Command line parameters for ccmsetup have been specified. Also please check whether Prerequisites check was successful. Error 0x80004005 ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)No valid source or MP locations ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)Failed to read assigned site code from registry. Uninstall Symantec Management Agent, refresh client in Microsoft Endpoint Configuration Manager console and the client immediately goes offline. Installation files will be reset and downloaded again. and it is saying that the client computer is compliant. Spice (1) flag Report. Please use google to find the solutions (e.g., moby/moby#8849). Distribution Manager also requires that IIS Web Services be installed on the Distribution Point Server that needs to support Background Intelligent Transfer Service (BITS)? Failed to send status 100. Error 0x8004100eccmsetup01/03/2019 16:38:072612 (0x0A34) ', Based on Certificate Issuer 'domainname Enterprise Root 01i001' found Certificate [Thumbprint 4E67BDA515464DE0C651562D0ABBAE688F7B7510] issued to 'PTW01CISWB001. ', Based on Certificate Issuer 'domainname Enterprise Root 01i001' found Certificate [Thumbprint C5CC8BED3777E7CE200257275E3F63E537D84ECA] issued to 'PTW01CISWB001. I'm glad you found the problem :). In ServiceMain ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) "Check configuration settings of the CMG service is up to . By clicking Sign up for GitHub, you agree to our terms of service and Hopefully, you have as simple a fix. ', Completed validation of Certificate [Thumbprint BC0B3996CCDBED300F78A7A9A1EEFC32BCEA8EAE] issued to 'PTW01CISWB001. LocationServices 8/9/2019 10:44:28 AM 9416 (0x24C8), 0 internet MP errors in the last 10 minutes, threshold is 5. Apr 11 2023 08:00 AM - Apr 12 2023 11:00 AM (PDT), Cloud Management Gateway for Azure AD Hybrid Joined Windows 10 Workstations, Microsoft Intune and Configuration Manager, https://docs.microsoft.com/en-us/sccm/core/clients/manage/cmg/setup-cloud-management-gateway, Re: Cloud Management Gateway for Azure AD Hybrid Joined Windows 10 Workstations. Failed to get certificate. Error: 0x80004005 - windows-noob.com Folder 'Microsoft\Microsoft\Configuration Manager' not found. Updated security on object C:\Windows\ccmsetup\cache\. not exist. ccmsetup 6/15/2017 12:24:47 AM 2680 (0x0A78) Failed to get client certificate for transportation. Defaulting to state of 63. ccmsetup01/03/2019 16:38:071124 (0x0464) ccmsetup.exe /SMSSITECODE = P01 Cause: The above error indicates that a new version of client installation source was required. None ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) I have got below message in target system: Begin to select client certificate ccmsetup 6/15/2017 12:24:47 Updated security on object C:\Windows\ccmsetup\. ', Begin validation of Certificate [Thumbprint BC0B3996CCDBED300F78A7A9A1EEFC32BCEA8EAE] issued to 'PTW01CISWB001. Failed to get client certificate for transportation. A possible reason for this failure is the CMG connection point failed to forward the message to the management point. Thanks @iamqizhao. It is obvious that later versions/fixes of configuration manager have not solved this problem. No AAD tenants information found. Retry time: 10 minute(s) ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) 12:24:47 AM 2680 (0x0A78) ccmsetup01/03/2019 16:38:072612 (0x0A34) \\SCCM-Server-Dan.cork.local\SMSClientccmsetup01/03/2019 16:38:072612 (0x0A34) We're glad that the question is solved now. Begin checking Alternate Network ConfigurationLocationServices01/03/2019 16:38:072612 (0x0A34) Failed to get client version for sending state messages. The Select First Certificate registry entry was set to OFF so a certificate cannot be selected. I wanted to know if i can remote access this machine and switch between os or while rebooting the system I can select the specific os. https://www.prajwaldesai.com/sccm-1810-upgrade-guide - Maybe helpful. ccmsetup01/03/2019 16:38:072612 (0x0A34) Any ideas on where I messed up? ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) StatusCode 200, StatusText ''ccmsetup01/03/2019 16:38:072612 (0x0A34) UseAzure="1" DPTokenAuth="1" UseInternetDP="0"> SCCM Client Installation Failed With Error Code 0x87d00215| Techuisitive Error: Conn.resetTransport failed to create client transport: connection error: desc = "transport: x509: certificate signed by unknown authority". Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. Client OS Version 6.2 Service Pack 0.0ccmsetup01/03/2019 16:38:072612 (0x0A34) What are some of the best ones? ', Completed validation of Certificate [Thumbprint 501B122B1272AD18F74C7766498428CCE2B0B524] issued to 'PTW01CISWB001. Begin searching client certificates based on Certificate Issuersccmsetup01/03/2019 16:38:072612 (0x0A34) CCMHTTPSPORT="443" CCMHTTPSSTATE="192" CCMFIRSTCERT="1" ccmsetup Launch from folder C:\Windows\ccmsetup\ ccmsetup 6/15/2017 9:50:35 PM 2320 (0x0910) I realized I messed up when I went to rejoin the domain I'm excited to be here, and hope to be able to contribute. However, we had an error in some of the logs, that we couldn't really pinpoint Failed to get AAD token. OS is not Win10RS3+, ENDOK. The 'Certificate Selection Criteria' was not specified, counting number What version of Windows 11 you are deploying, Windows 11 21H2 or 22h2? RegTask: Failed to get certificate. The management point returned the following error: 'Unauthorized'. Folder 'Microsoft\Microsoft\Configuration Manager' not found. ', Completed searching client certificates based on Certificate Issuers, instance of CCM_ServiceHost_CertRetrieval_Status. SiteVersion: ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Sep 16 2020 Error 0x80004005 ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)GetADInstallParams failed with 0x80004005 ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)Couldn't find an MP source through AD. My CMG connection point is installed on a 2012 R2 non-Azure AD Hybrid Joined server slated for upgrade to 2019 later this year. Software Center loads with a blank window. SCCM-Unable to install SCCM client - Software Deployment & Patching Ignoring MP error during post-rotation flush period of 20 seconds. ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) This is the first site we have seen this issue on, but it is also the first 1806 environment in HTTPS only. Completed searching client certificates based on Certificate Issuersccmsetup01/03/2019 16:38:072612 (0x0A34) Oct 01 2020 ccmsetup01/03/2019 16:38:072612 (0x0A34) 1. force to run a cycle from the client workstation and it will say compliant. ccmsetup 6/15/2017 12:24:47 AM 2680 (0x0A78) ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) ccmsetup01/03/2019 16:38:072612 (0x0A34) Waiting for retry. The management point returned the following error: 'Unauthorized'. GetSSLCertificateContext failed with error 0x87d00280 ccmsetup Sign in Failed to connect to machine policy namespace. I have my CMG setup and a handful of Azure AD Hybrid Joined Windows 10 Workstations (1809 and 1903) are getting a Client Setting to use the CMG. ccmsetup 6/15/2017 6/15/2017 9:50:35 PM 3220 (0x0C94) 6/15/2017 12:24:47 AM 2680 (0x0A78) 2,Please make sure you have added the boundary to your boundary groups and associated your DPs and MPs to the boundary groups. conn, err := grpc.Dial(address, grpc.WithTransportCredentials(credentials.NewClientTLSFromCert(nil, ""))). I decided to let MS install the 22H2 build. Selected client certificate is not trusted by the CMG service. Failed to find DP locations from MP 'HTTPS://winsccm.testlab.com Opens a new window' with error 0x87d00280, status code 200. Find out more about the Microsoft MVP Award Program. My speculation is that CA is not loaded properly (e.g., due to the wrong path, etc.).