Problem: no communication between clients and SCCM

Question

Hello,

All clients are displayed as inactive under Devices. This has been the case since December 6, 2024. What works: Ping - Client -> SCCM on port 80 Name resolution - Client -> SCCM

The following URLs are accessible and displayed:
http://sccm/sms_mp/.sms_aut?mpcert

http://sccm/sms_mp/.sms_aut?mplist

In the logs, I receive the following messages:

ClientIDManagerStartup.log

[RegTask] - Client is not registered. Sending registration request for GUID: A1842029-86E7-4165-AF28-8C5802EE8024 ... ClientIDManagerStartup 01/21/2025 14:32:23 6784 (0x1A80) RegTask: Failed to send registration request message. Error: 0x87d00231 ClientIDManagerStartup 01/21/2025 14:32:24 6784 (0x1A80) RegTask: Failed to send registration request. Error: 0x87d00231 ClientIDManagerStartup 01/21/2025 14:32:24 6784 (0x1A80) [RegTask] - Sleeping for 15360 seconds ... ClientIDManagerStartup 01/21/2025 14:32:24 6784 (0x1A80)

ClientLocation.log

Current Assigned Management Point is SCCM.xx.yy.zz with Version 9106 and Capabilities: <Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities> ClientLocation 06.12.2024 12:11:25 4400 (0x1130) Current Assigned Management Point is SCCM.xx.yy.zz with Version 9106 and Capabilities: <Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities> ClientLocation 06.12.2024 12:14:35 4400 (0x1130) Current Assigned Management Point is SCCM.xx.yy.zz with Version 9106 and Capabilities: <Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities> ClientLocation 06.12.2024 12:17:45 4400 (0x1130) LSRefreshInternetMode ClientLocation 06.12.2024 12:20:34 3932 (0x0F5C) mapResources.end() != it, HRESULT=87d00215 (K:\dbs\sh\cmgm\0405_083130\cmd\1a\src\Framework\Messaging\CcmExec\ccmservice_iccmsystemresources.cpp,701) ClientLocation 06.12.2024 12:20:34 3932 (0x0F5C) [Resource-Network] Returning value 2. ClientLocation 06.12.2024 12:20:34 3932 (0x0F5C) LSGetLookupMPFromWMI ClientLocation 06.12.2024 12:20:34 3932 (0x0F5C) LSGetHomeMPFromWMI ClientLocation 06.12.2024 12:20:34 3932 (0x0F5C) LSGetADForestAndDomainName ClientLocation 06.12.2024 12:20:34 3932 (0x0F5C) LSGetLookupMPFromRegistry ClientLocation 06.12.2024 12:20:34 3932 (0x0F5C)

CertificateMaintenance.log
CCM::LocationServices::CcmVerifyMessage(pStreamData, szSenderMachine, szSignature, szMPSiteCode, bLocalSiteOK), HRESULT=80072efd (K:\dbs\sh\cmgm\0405_083130\cmd\21\src\Framework\security\MsgAuth\CCMAuthMessageHook\ccmcertutil.cpp,225) CertificateMaintenance 06.12.2024 13:30:37 1444 (0x05A4) CCM::LocationServices::CcmVerifyMessage(pStreamData, szSenderMachine, szSignature, szMPSiteCode, bLocalSiteOK), HRESULT=87d00309 (K:\dbs\sh\cmgm\0405_083130\cmd\21\src\Framework\security\MsgAuth\CCMAuthMessageHook\ccmcertutil.cpp,225) CertificateMaintenance 06.12.2024 13:30:37 1444 (0x05A4) !sTempString.empty(), HRESULT=80070057 (K:\dbs\sh\cmgm\0405_083130\cmd\22\src\Framework\Core\CCMCore\String.cpp,1125) CertificateMaintenance 06.12.2024 13:30:37 1444 (0x05A4) !sTempString.empty(), HRESULT=80070057 (K:\dbs\sh\cmgm\0405_083130\cmd\22\src\Framework\Core\CCMCore\String.cpp,1125) CertificateMaintenance 06.12.2024 13:30:37 1444 (0x05A4) Failed to verify signature of message received from MP using name 'SCCM.xx.yy.zz' CertificateMaintenance 06.12.2024 13:30:37 1444 (0x05A4)

Any help would be appreciated. Please feel free to reach out if you have any further questions. Thank you!

Answer 1

Hi, @Sam

Thank you for posting in Microsoft Q&A forum.

You may check if you checked below setting in the properties of Sites(Administration\Site Configuration\Sites\Properties\Communication Security tab)? If yes, try to uncheck it to see if it helps.

Use client PKI certificate (client authentication capability) when available.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".