ConfigMgr 2007: Clients not installed - RegTask: Failed to get certificate. Error: 0x80004005
We're starting to see a couple of these issues roll in so I thought a heads up might be in order. This solution comes from Brian Shaw, one of our top gun support Engineers our in Charlotte, NC:
========
Issue: Some clients may not show as being installed when viewed through the System Center Configuration Manager 2007 admin console. From the target computers themselves the agents appear to function properly. When viewing the ClientLocation.log file you may also see the following error:
RegTask: Failed to get certificate. Error: 0x80004005
Cause: This is caused by an issue with the RSA machine keys on the client.
Resolution: To resolve this issue complete the following steps:
- Backup all files in the C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys folder (or the corresponding folder on your specific clients).
- Restart the SMS Agent Host Service to recreate these certificates.
- At this point the clients should start showing up in the console. If not, remove and push the client agent to the affected computers again.
========
I hope you don't get this issue yourself but if you do then at least know you'll know how to fix it. Thanks Brian!
Enjoy!
J.C. Hornbeck | Manageability Knowledge Engineer
Comments
Anonymous
January 01, 2003
thank youAnonymous
May 28, 2010
I'm not sure I purchased the Reg Task but if I did, please cancel it at once. I'm having health problems and moving into a nursing home soon. Please refund my money if I purchased this plan as I won't be able to use it. If it shows on the my credit statement, I'll have to have them cancel it. Thank you, BarbaraAnonymous
September 09, 2010
Brilliant fix - I had a client with the same issue and deleting those RSA keys fixed the problem. Thanks again! Chris.Anonymous
October 26, 2010
I think I must have downloaded two copies because I have two receipts for 4.95 and with in 10 days 35.00 will be billed < I also have one for 29.95 The one I thought I was getting was the 29.95 one so will you credit the other one back to my account. Thanks, ShirleyAnonymous
November 10, 2010
I WOULD LIKE TO GET A REFUN,I AM UNABLE TO WORK THE REGTASK.Anonymous
November 21, 2010
I am so sorry but I must cancel this product I can not afford it. Thank you for the trial run it is very good and help fullAnonymous
December 14, 2010
Worked great thanks. Not sure what started this error in the first place. Glad its fixed thoAnonymous
January 25, 2011
i sorry but i must cancel the regstaf product in that it doesn't work good for me. Please confirm that this has been done. thanksAnonymous
February 27, 2011
I want a refund. Dont want. My computer has not run right since I installedAnonymous
April 16, 2011
I want to cencel my request for this product. I am unable to intsall because I am not that familar with computers. Please cancel my order and refund my money.Anonymous
May 02, 2011
I cannot install the program because I never got the Key.Anonymous
May 05, 2011
regtask found almost 2000 errors in my PC and when I bought the product and received the key it didn't work! That key cost me 41 dolars and I can use it because of this problem. regtask wants me to spend another 40 d0llar in order to get another key.Anonymous
June 03, 2011
It was a confusing process, seemingly wanting me to buy additional processes. i couldn't use the key supposedly offered. Please cancel my order.Anonymous
August 07, 2011
I dont understand how to use and cannot afford the cost. thank you. PLs cancelAnonymous
September 01, 2011
I'm glad to see that I am not the only one having problems. I bought the product, I have a receipt for the product, but it will not run. I asked for help yesterday and was told I would get help today. Today is nearly over. No help.Please cancel my order. And I would like a notification that it has been cancelled.Anonymous
September 07, 2011
we would like our money back ,It doesn"t work computer has more errors than before. Please let us know when repayed to our account thank youAnonymous
April 09, 2012
I am unable to get regtask license # registered. Please cancel my order. I PLAN TO STOP PAYMENT WITH VISA ON THIS ORDER. r.Anonymous
May 16, 2012
Why can't I get a phone number for techincal support withou a FEE?Anonymous
May 24, 2012
This is an irresponsible post. true, this will work on some servers....but it is a barbaric way to go about it and can result in serious certificate issues w/ IIS servers,lync servers,etc. What you're advising here does not account for any private keys. The CORRECT was to go about this would be as follows: Open MMC Add certificates snap-in manage certs for computer find SMS cert and delete it re-start SMS agent host This will achieve the desired result w/o trashing your other certificates in the process. This post should either be amended or removed. Bad advice.Anonymous
June 19, 2012
Please cancel and issue refund to the credit card I used. Can't make it work. Thank you RalphAnonymous
September 18, 2012
¡Brillante! Respaldé toda la carpeta MachineKeys y después la eliminé; Reinicié el servicio SMS Agent Host y el problema fue resuelto. Gracias, llevaba dos días con esto.Anonymous
February 20, 2013
U.R. Wrong's flamboyance aside, they are correct that this is not the correct solution. The steps U.R. gives are the correct ones, and the SMS cert that should be deleted is: 19c5cf9c7b5dc9de3e548adb70398402_f985961b-8296-47d8-8148-6cd13ba897aa Then restart the CCM agent service and the certificate will be recreated.Anonymous
October 17, 2013
In my case it did not work, but it help me, I had to grant System Full Control Permissions to the file and thats solved!!! In my case there was not any certificate in SMS Certificates on MMC console. ThanksAnonymous
June 25, 2015
I had a client with the same issue and deleting the RSA --> Machine Keys (19c******) fixed problem.
Thanks!!Anonymous
January 29, 2016
It worked for me but, in my case the GUID has been missing in the SCCM 2007 client and I have tried to backup the Machine keys first and then reinstalled the client again. The client was started showing again on the SCCM console.
Thanks for your help.