Re: SMS 2003 SP1 Client Install Problem or Policy Retreival Problem?

From: Jeff Harbaugh [MSFT] (jeffharb_at_online.microsoft.com)
Date: 11/04/04 

Date: Thu, 4 Nov 2004 09:43:37 -0800

This just means an internal error occurred on generation of the private key.
It is possible that the crypto store has somehow been corrupted. make sure
that the acls are set correctly on his crypto locations. The attached batch
file sets them to what we need. 

-- 
Thanks,
Jeff Harbaugh [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.
"Stuart Kirk" <stuart.kirk@cityofmesa.org> wrote in message 
news:OzXESJdwEHA.3376@TK2MSFTNGP12.phx.gbl...
> The MP is setup and thousands of other clients have access.  These clients
> show as assigned to the site in the admin console, but not installed; 
> these
> particular machines are on the same subnet as many other servers that 
> don't
> have this problem.  I see nothing unusual in the clientlocation.log or the
> locationservices.log; everything is assigned to the proper server; 
> however,
> the ccmexec.log has some interesting entries:
> ...
> Failed to find the certificate in the store, retry 1.
> Failed to find the certificate in the store, retry 2.
> Failed to find the certificate in the store, retry 3.
> Failed to find the certificate in the store, retry 4.
> Failed to find the certificate in the store, retry 5.
> Creating Signing Certificate...
> CryptGenKey failed: 0x80090020
> Failed to create certificate 80090020
> CCMDoCertificateMaintenance failed (0x80090020).
> ...
> Failed to submit event to the Status Agent. Attempting to create pending
> event.
> ...
> CCMDoCertificateMaintenance() raised
> CCM_ServiceHost_CertificateOperationsFailure status event.
> ...
> System task 'CertificateMaintenance' returned error code 0x80090020.
> ...
> EndpointMessage(Queue='CertificateMaintenanceEndpoint',
> ID={61984271-D12F-4789-98EF-ADF9FFA49DED}): Will be discarded 
> (0x80090020).
> ...
> Endpoint'PolicyAgent_ReRequestPolicy' return 0x80004005 from event
> notification
> ...
> EndpointMessage(Queue='CertificateMaintenanceEndpoint',
> ID={12F47D1C-E84F-48F8-BAFD-3A67C799329E}): Will be discarded 
> (0x80090020).
> EndpointMessage(Queue='CertificateMaintenanceEndpoint',
> ID={3CA9F5A2-606E-453B-BD57-D6904164C570}): Will be discarded 
> (0x80090020).
> EndpointMessage(Queue='CertificateMaintenanceEndpoint',
> ID={3CDE28EC-E32F-4CD4-84EC-09132B1D8D93}): Will be discarded 
> (0x80090020).
>
> I have obviously taken out large portions of the log, but these are all
> highlighted in SMS Trace.  The first bunch of events happened during or
> immediately after I started a manual installation of the client.  The 
> other
> entries appear to be at an hourly interval thereafter.  Any help is
> appreciated.
>
> --Stuart
>
>
>
> "Jeff Harbaugh [MSFT]" <jeffharb@online.microsoft.com> wrote in message
> news:%23mZkYjcwEHA.3936@TK2MSFTNGP10.phx.gbl...
>> The problem is the machines are not receiving policy from the MP. Please
>> check to make sure your MP is setup and that the clients have access. You
>> can view the clientlocation.log and locationservices.log and ccmexec.log
> to
>> see if there are errors connecting and finding site assignment. Also 
>> check
>> in the admin console that the clients show as assigned to the site. If 
>> not
>> please confirm your boundaries.
>>
>> -- 
>> Thanks,
>> Jeff Harbaugh [MSFT]
>> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>>
>> "Stuart Kirk" <stuart.kirk@cityofmesa.org> wrote in message
>> news:%23sG1GecwEHA.3108@TK2MSFTNGP14.phx.gbl...
>> >I have two servers that won't cooperate.  The SMS client appears to be
>> > installed when looking at the servers (icons in Control Panel, SMS 
>> > Agent
>> > Host Service running), but none of the Components show Enabled or
> Disabled
>> > (all of them are simply Installed).  The Actions tab only shows two
>> > possible
>> > actions:  Machine Policy Retrieval and User Policy Retreival.  They 
>> > both
>> > show Assigned but not installed in the Admin console.  I may also have
>> > this
>> > problem on some of our workstations, but I haven't gotten that far yet.
>> > Thanks in advance.
>> >
>> > --Stuart
>> >
>> >
>>
>>
>
> 
begin 666 manualacl.ba_
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`
end

Relevant Pages