Advanced Client 0x8009100e error in LocationServices.log

Tech-Archive recommends: Fix windows errors by optimizing your registry



I have a recently installed SMS 2003 SP2 AD extended enviornment with a
single primary site and multiple secondaries sites with proxy MPs. The
primary is Windows 2003 SP1 with SQL 2005, the secondaries ar Windows 2000
SP4, and all the clients are advanced clients.

I am getting the error shown below on Advanced Clients at some of my
secondary sites. This issue seems to affect all the clients at a site except
the client on the Secondary Site server.

"Failed to verify received message 0x8009100e" from LocationServices.log

At these afflicted sites the Advanced Client control panel applet's actions
tab only gives two options:

User policy retrieval
Machine policy retrieval

These clients seem to find the proxy MP fine and are successful in sending
DDR to the primary site.

KB 922356 recommends using the ccmdelcert to delete the certs off the MP I
tried this but it does not resolve the issue. I have also tried deleting the
Proxed MP object from the systems management container at the same time. It
gets recreated but the issue continues.

I have tried removing the proxy MP from the secondary site server using
ccmclean /all rebooting and reinstalling but I still get the same error.

According to winerror.h 0x8009100e = CRYPT_E_SIGNER_NOT_FOUND

The certificateMaintence.log reports the error below

"Failed to verify signature for assigned MP"

Here are the contents of the locationservices.log when I bouce the SMS Agent
service:

Attempting to retrieve default management point from
AD LocationServices 12/6/2006 1:10:28 AM 2832 (0x0B10)
Retrieved Default Management Point from AD:
PRIMARYSS.us.SMURF.PAPPA LocationServices 12/6/2006 1:10:29 AM 2832 (0x0B10)
Persisting the default management point in WMI LocationServices 12/6/2006
1:10:29 AM 2832 (0x0B10)
Persisted Default Management Point Location
locally LocationServices 12/6/2006 1:10:29 AM 2832 (0x0B10)
Attempting to retrieve proxy MP from AD LocationServices 12/6/2006 1:10:29
AM 2832 (0x0B10)
Current AD site of machine is TelAviv LocationServices 12/6/2006 1:10:29
AM 2832 (0x0B10)
Retrieved Proxy Management Point from AD:
SECONDARYSS.we.SMURF.PAPPA LocationServices 12/6/2006 1:10:29 AM 2832 (0x0B10)
Attempting to retrieve local MP from AD LocationServices 12/6/2006 1:10:29
AM 2832 (0x0B10)
Current AD site of machine is TelAviv LocationServices 12/6/2006 1:10:29
AM 2832 (0x0B10)
Retrieved local Management Point from AD:
SECONDARYSS.we.SMURF.PAPPA LocationServices 12/6/2006 1:10:29 AM 2832 (0x0B10)
Executing Task LSRefreshLocationsTask LocationServices 12/6/2006 1:10:29
AM 1376 (0x0560)
Executing Task LSTimeOutRequestsTask LocationServices 12/6/2006 1:10:29
AM 2096 (0x0830)
Executing Task LSRefreshDefaultMPTask LocationServices 12/6/2006 1:10:29
AM 2240 (0x08C0)
Attempting to retrieve default management point from
AD LocationServices 12/6/2006 1:10:29 AM 2240 (0x08C0)
Retrieved Default Management Point from AD:
PRIMARYSS.us.SMURF.PAPPA LocationServices 12/6/2006 1:10:29 AM 2240 (0x08C0)
Persisting the default management point in WMI LocationServices 12/6/2006
1:10:29 AM 2240 (0x08C0)
Persisted Default Management Point Location
locally LocationServices 12/6/2006 1:10:29 AM 2240 (0x08C0)
Attempting to retrieve proxy MP from AD LocationServices 12/6/2006 1:10:29
AM 2240 (0x08C0)
Current AD site of machine is TelAviv LocationServices 12/6/2006 1:10:29
AM 2240 (0x08C0)
Retrieved Proxy Management Point from AD:
SECONDARYSS.we.SMURF.PAPPA LocationServices 12/6/2006 1:10:30 AM 2240 (0x08C0)
Attempting to retrieve local MP from AD LocationServices 12/6/2006 1:10:30
AM 2240 (0x08C0)
Current AD site of machine is TelAviv LocationServices 12/6/2006 1:10:30
AM 2240 (0x08C0)
Retrieved local Management Point from AD:
SECONDARYSS.we.SMURF.PAPPA LocationServices 12/6/2006 1:10:30 AM 2240 (0x08C0)
Refreshing the Management Point List for site DOM LocationServices 12/6/2006
1:13:30 AM 1240 (0x04D8)
Attempting to retrieve management points from AD LocationServices 12/6/2006
1:13:30 AM 1240 (0x04D8)
Retrieving management points from MP SECONDARYSS.we.SMURF.PAPPA over
HTTP LocationServices 12/6/2006 1:13:30 AM 1240 (0x04D8)
Refreshing trusted key information LocationServices 12/6/2006 1:13:31
AM 1240 (0x04D8)
Persisting the management point authentication information in
WMI LocationServices 12/6/2006 1:13:32 AM 1240 (0x04D8)
Persisted Management Point Authentication Information
locally LocationServices 12/6/2006 1:13:32 AM 1240 (0x04D8)
Attempting to refresh certificate information from
AD LocationServices 12/6/2006 1:13:32 AM 1240 (0x04D8)
Refreshed Certificate Information from AD LocationServices 12/6/2006 1:13:32
AM 1240 (0x04D8)
Retrieved thumbprints from AD LocationServices 12/6/2006 1:13:32 AM 1240
(0x04D8)
Failed to verify received message 0x8009100e LocationServices 12/6/2006
1:13:32 AM 1240 (0x04D8)
Failed to verify received message 0x8009100e LocationServices 12/6/2006
1:13:32 AM 1240 (0x04D8)
Failed to verify received message 0x8009100e LocationServices 12/6/2006
1:13:32 AM 2736 (0x0AB0)
Failed to verify received message 0x8009100e LocationServices 12/6/2006
1:13:32 AM 2736 (0x0AB0)







.



Relevant Pages

  • Re: Secondary Site - No management point
    ... Did you grant the Secondary Site computer account permission to access ... Did you grant the Proxy MP computer account access to Primary Site DB: ... management point as it should. ...
    (microsoft.public.sms.setup)
  • Re: SMS 2003: Advanced client Phase 1 Initialization error
    ... If it is a secondary site the advanced clients will only assign to the ... primary site but will retrieve policy through the secondary site or proxy ... > <![LOG[Retrieved Default Management Point from AD: ...
    (microsoft.public.sms.admin)
  • Re: Secondary Site MP
    ... What does your client LocationServices.log show? ... the Management Point Proxy? ... I'm having problems with a Secondary site MP. ... > "Troubleshooting Management Points for SMS 2003" ...
    (microsoft.public.sms.setup)
  • Proxy point
    ... If the SMS 2003 secondary site is set to be management point then that ... functions as a proxy point for the clients, ...
    (microsoft.public.sms.admin)
  • Re: Advanced Client Install!
    ... <![LOG[Attempting to retrieve proxy MP from AD]LOG]! ... <![LOG[Retrieved Proxy Management Point from AD: NUTMEG] ...
    (microsoft.public.sms.admin)