failed to get client certificate for transportation error 0x87d00215 failed to get client certificate for transportation error 0x87d00215

SiteVersion: ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Error 0x87d00215 additionally Failed to get CCM access token and client doesn't have PKI issued cert to use SSL. Check if your boundaries and boundary groups are correctly configured. Manually creating this registry key works and the client is now able to communicate with the MP. Client is on internetccmsetup01/03/2019 16:38:072612 (0x0A34) Checking Write Filter Status. CCMHTTPSCERTNAME: ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) However, we had an error in some of the logs, that we couldn't really pinpoint Failed to get AAD token. SslState value: 224 ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) The same settings worked for windows 10 machine but I am not sure why this is not working for windows 7 system. ', Completed validation of Certificate [Thumbprint 6F72447F3B4EBC63F25AAB9023986F3F3FC22975] issued to 'PTW01CISWB001. The Windows 7 one will be retired when we completly move over. Domain joined client is in Intranetccmsetup01/03/2019 16:38:072612 (0x0A34) of certificates present in 'MY' store of 'Local Computer'. Failed to send status 100. Unable to find any Certificate based on Certificate Issuers ccmsetup01/03/2019 16:38:072612 (0x0A34) SCCM Software Updates not installing to endpoints, that SCCM site server computer account are in the Local. [] Params to send '5.0.8740.1024 Deployment Error: 0x0, 'ccmsetup01/03/2019 16:38:072612 (0x0A34) installed. Uninstall Symantec Management Agent, refresh client in Microsoft Endpoint Configuration Manager console and the client immediately goes offline. [WINDOWS10X64] Running on 'Microsoft Windows 10 Enterprise 2016 LTSB' of certificates present in 'MY' store of 'Local Computer'. Failed to get certificate. Error: 0x80004005 - windows-noob.com Retry time: 10 minute(s)ccmsetup01/03/2019 16:38:072612 (0x0A34) LocationServices 8/9/2019 10:44:28 AM 9416 (0x24C8), 1 internet MP errors in the last 10 minutes, threshold is 5. SMSSITECODE=101 CCMFIRSTCERT=1 CCMCERTSTORE=MY, Running on platform X64ccmsetup01/03/2019 16:38:071124 (0x0464). ', Based on Certificate Issuer 'domainname Enterprise Root 01i001' found Certificate [Thumbprint 259ECEA46C3DAC33F0B5838C5B82E36B1BD872E3] issued to 'ptw01ciswb001. Sending location request to 'SCCM-Server-Dan.cork.local' with payload ' Command line parameters for ccmsetup have been specified. I have my CMG setup and a handful of Azure AD Hybrid Joined Windows 10 Workstations (1809 and 1903) are getting a Client Setting to use the CMG. ccmsetup 6/15/2017 Is there a way i can do that please help. Client is set to use webproxy if available. You need to hear this. Updating MDM_ConfigSetting.ClientDeploymentErrorCode with value 0ccmsetup01/03/2019 16:38:072612 (0x0A34) privacy statement. I had to remove the machine from the domain Before doing that . LocationServices 8/9/2019 11:00:29 AM 4280 (0x10B8), Ignoring MP error during post-rotation flush period of 20 seconds. This is not a supported write filter device. ==========[ ccmsetup started in process 288 ]========== ccmsetup 6/15/2017 9:50:35 PM 2320 (0x0910) I just completed a new SCCM Primary Site installation for a customer who has a requirement of HTTPS communication only. Task does Client push installation failing : r/SCCM - reddit Begin searching client certificates based on Certificate Issuersccmsetup01/03/2019 16:38:072612 (0x0A34) The management point returned the following error: 'Unauthorized'. LocationServices 8/9/2019 11:00:28 AM 212 (0x00D4), 3 internet MP errors in the last 10 minutes, threshold is 5. Ccmsetup is being restarted due to an administrative action. 6/15/2017 12:24:47 AM 2680 (0x0A78) OS is not Win10RS3+, ENDOK. CCMHTTPSPORT: 443 ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) On the status in monitoring window of the SCCM console, the Distribution point says that i have successfully distributed content on the remote DP but there is an error saying Failed to create virtual directory? I am trying to push the client to the server that is hosting my SCCM. CCMCERTID (Tells SCCM to use a specific certificate based on thumbprint). Cloud Management Gateway for Azure AD Hybrid Joined Windows 10 Have a question about this project? i have seen a fix to this by restarting the DP and distribute again the content but still it persist. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register. I'm glad you found the problem :). What are some of the best ones? Error 0x80004005 ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)GetADInstallParams failed with 0x80004005 ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)Couldn't find an MP source through AD. Thank you very much for your feedback and sharing. Less error but still getting some. Error 0x87d00280 ccmsetup 6/15/2017 12:24:47 AM 2680 (0x0A78) ', Begin validation of Certificate [Thumbprint C5CC8BED3777E7CE200257275E3F63E537D84ECA] issued to 'PTW01CISWB001. Failed to revoke client upgrade local policy. You must log in or register to reply here. NoMaintenance Windows on the device collection? HTTPS://winsccm.testlab.com/ccm_system/request, HTTPS://winsccm.testlab.com/CCM_Client/ccmsetup.cab. More info about Internet Explorer and Microsoft Edge. This topic has been locked by an administrator and is no longer open for commenting. ", The step "Testing the CMG channel for management point: 'thenameoftheMP'" gives me a new error, "Failed to refresh MP location. CCMHTTPSCERTNAME: ccmsetup01/03/2019 16:38:072612 (0x0A34) Also I do have different site codes and I made sure site assigment was not set in the boundaries. RegTask: Failed to get certificate. Updating MDM_ConfigSetting.ClientDeploymentErrorCode with value 0ccmsetup01/03/2019 16:38:072612 (0x0A34) filter maintenance mode. Distribution Manager also requires that IIS Web Services be installed on the Distribution Point Server that needs to support Background Intelligent Transfer Service (BITS)? I'm glad you may have found the root cause! ccmsetup01/03/2019 16:38:071124 (0x0464) Source List: ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Updated security on object C:\Windows\ccmsetup\. Failed to revoke client upgrade local policy. Did the example code above for the grpc client and server looked correct to you? https://social.technet.microsoft.com/Forums/en-US/f660d3c6-72a6-4ad6-80e3-2b6a5583341a/clients-not-r Re: SCCM Software Updates not installing to endpoints, Site and site system prerequisites for Configuration Manager. Defaulting to state of 63. Defaulting to state of 63.ccmsetup01/03/2019 16:38:072612 (0x0A34) Waiting for retry. ConfigMgr Client installation issues in HTTPS environment Begin searching client certificates based on Certificate Issuersccmsetup01/03/2019 16:38:072612 (0x0A34) For a better experience, please enable JavaScript in your browser before proceeding. Check next MP. Task does not exist. Running as user "SYSTEM"ccmsetup01/03/2019 16:38:072612 (0x0A34) Bonus Flashback: March 3, 1969: Apollo 9 launched (Read more HERE.) Conn.resetTransport failed to create client transport: connection error Error 0x8004100e ccmsetup 6/15/2017 9:50:24 PM 4140 (0x102C) \\SCCM-SERVER-DAN.CORK.LOCAL\SMSClientccmsetup01/03/2019 16:38:072612 (0x0A34) SCCM Native mode, CCMsetup and multiple valid certs : r/SCCM - reddit :). CCMHTTPPORT: 80 ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) 0x8004100e Successfully refresh bootstrap information from AD. Error 0x8004100e ccmsetup 6/15/2017 12:24:47 AM 4480 (0x1180) I might be wrong. MSI log file: C:\Windows\ccmsetup\Logs\client.msi.logccmsetup01/03/2019 16:38:072612 (0x0A34) Please find the below Prajwal Desai link to upgrade SCCM 1810. "Check configuration settings of the CMG service is up to date" has an error of "Configuration version of the CMG service should be 2. Client OS Version 6.2 Service Pack 0.0 ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Also please check whether Prerequisites check was successful. MSI log file: C:\Windows\ccmsetup\Logs\client.msi.log ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Site server properties are set LocationServices 8/9/2019 11:00:29 AM 212 (0x00D4), Internet MP error threshold reached, moving to next MP. However a distribution point could not be located. Hopefully, you have as simple a fix. Now I have just select https or http option under site properties. Config file: C:\Windows\ccmsetup\MobileClientUnicode.tcfccmsetup01/03/2019 16:38:072612 (0x0A34) Is only one https client or all the client has this issue? Completed searching client certificates based on Certificate Issuersccmsetup01/03/2019 16:38:072612 (0x0A34) Launch from folder C:\Windows\ccmsetup\ccmsetup01/03/2019 16:38:071124 (0x0464) A possible reason for this failure is the CMG connection point failed to forward the message to the management point. [CCMHTTP] ERROR INFO: StatusCode=200 StatusText=ccmsetup01/03/2019 16:38:072612 (0x0A34) This is what I am getting now. Please find the below Prajwal Desai link to upgrade SCCM 1810. https://www.prajwaldesai.com/sccm-1810-upgrade-guide - Maybe helpful. ConfigMgrAdminUISetupVerbose.log ? Can you verifythat SCCM site server computer account are in the Local Administrators group on the server where DP role is to be installed? The 'Certificate Selection Criteria' was not specified, counting number Please use google to find the solutions (e.g., moby/moby#8849). We wont share your details but you can read more in our Privacy Policy. I have checked the forums and googled for a definitive answer to this but nothing seems to work. Failed to connect to machine policy namespace. ccmsetup.exe /SMSSITECODE = P01 Cause: The above error indicates that a new version of client installation source was required. I had also faced issue in upgrading SCCM Site server from 1806 to 1810 but not the same error which you received , however I checked above 2 log files and got the root cause. There are at least 2 certificates valid for ConfigMgr usage that meet the selection criteria. tnmff@microsoft.com. State message with TopicType 800 and TopicId {3B6AC48B-0F6B-4103-9784-390783104C38} has been sent to the FSPFSPStateMessage01/03/2019 16:38:072612 (0x0A34) There are no certificates in the 'MY' store. Error: 0x87d00215, Torsten Meringer | http://www.mssccmfaq.de. We are working every day to make sure our community is one of the best. State message with TopicType 800 and TopicId {ADEBF393-E5B7-487D-80B8-96EB1AFB7D59} has been sent to the FSPFSPStateMessage01/03/2019 16:38:072612 (0x0A34) (10.0.14393). ', Based on Certificate Issuer 'domainname Enterprise Root 01i001' found Certificate [Thumbprint 4E67BDA515464DE0C651562D0ABBAE688F7B7510] issued to 'PTW01CISWB001. ccmsetup01/03/2019 16:38:072612 (0x0A34) ccmsetup01/03/2019 16:38:072612 (0x0A34) MPs:ccmsetup01/03/2019 16:38:072612 (0x0A34) (0x0C94) CcmSetup failed with error code 0x87d00454, Configuration Manager (Current Branch) Site and Client Deployment. Get the device ID using "dsregcmd /status" to verify against your AAD information. Begin to select client certificate ccmsetup 6/15/2017 12:24:47 AM SiteCode: 001 ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) My Azure AD User discovery is happily chugging along and my Windows 10 workstations in question are successfully Azure AD Hybrid Joined. Can you share with us a screenshot of your: I think the issue might be resolved but I do have a question can you have overlaping boundaries and boundary groups with mutiple SCCM standalone servers. ', Completed validation of Certificate [Thumbprint 259ECEA46C3DAC33F0B5838C5B82E36B1BD872E3] issued to 'ptw01ciswb001. 08:15 AM ccmsetup 6/15/2017 12:24:47 AM 2680 (0x0A78) ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) It is unclear if the problem is 1806 related or just a one-off for this client. hint to find the issue ). ', Based on Certificate Issuer 'domainname Enterprise Root 01i002' found Certificate [Thumbprint BC0B3996CCDBED300F78A7A9A1EEFC32BCEA8EAE] issued to 'PTW01CISWB001. Launch from folder C:\Windows\ccmsetup\ ccmsetup 6/15/2017 9:50:35 PM 2320 (0x0910) Folder 'Microsoft\Microsoft\Configuration Manager' not found. OS is not Win10RS3+, ENDOK. Error 0x87d00282. SOLVED - Client install fails with Error 0x87d00280 on ccmsetup log Source List:ccmsetup01/03/2019 16:38:072612 (0x0A34) Just in time for "work from home". Error 0x87d00454 There are no certificates in the 'MY' store. Go to C:\Windows\System32\GroupPolicy\Machine and delete Registry.pol. ccmsetup 6/15/2017 9:50:35 PM 2320 (0x0910) AM 2680 (0x0A78) GET 'HTTPS://winsccm.testlab.com/CCM_Client/ccmsetup.cab Opens a new window' force to run a cycle from the client workstation and it will say compliant. WUAhandler.log has no error but in the Updatedeployment.log error is GetUpdateInfo: Failed to get targeted update error = 0x87d00215. SeeSite and site system prerequisites for Configuration Managerfor details. ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) I also know that there are a few switches I can try during installation: ccmsetup.exe /UsePKICert /NoCRLCheck CCMFIRSTCERT=1 SMSSITECODE=P01 CCMCERTID=MY;D29211C57353FB9FB8944AFF6C14770D9AD4D58C. ccmsetup Get our latest recommendations, advice and offers direct to your inbox. GetSSLCertificateContext failed with error 0x87d00280 ccmsetup CcmSetup version: 5.0.8412.1004 ccmsetup 6/15/2017 9:50:35 PM 2320 (0x0910) (Just giving hint to find the issue ) Also please check whether Prerequisites check was successful. 04:21 AM What do sccm client repair tool you use? I followed the instructions athttps://docs.microsoft.com/en-us/sccm/core/clients/manage/cmg/setup-cloud-management-gatewaywhich were pretty good and easy to follow. Performing AD query: As of 29th Jan 2019. If you have any questions in future, we welcome you to post in Microsoft Q&A forum again. Start machine policy retrieval in configuration manager client control, WUserver is pointing in the sccm SUP and i have run the machine policy retrieval. 02:27 PM. It may not display this or other websites correctly. Command line parameters for ccmsetup have been specified. MSI properties: CCMCERTISSUERS="CN=SCCM-Server-Dan.cork.local" CCMCERTSTORE="MY" CCMFIRSTCERT="1" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="63" CCMPKICERTOPTIONS="1" This is not a supported write filter device. Failed to get client certificate for transportation. 2680 (0x0A78) ccmsetup01/03/2019 16:38:072612 (0x0A34) There was an error trying to send your message. Checking the installed software update on the client computer it is not installed but it is still says compliant. I just hope it doesn't take you a month or two to track it down like it took me! Finding certificate by issuer chain returned error 80092004ccmsetup01/03/2019 16:38:072612 (0x0A34) Completed searching client certificates based on Certificate Issuers - edited There are at least 2 certificates valid for ConfigMgr usage that meet the selection criteria. 6/15/2017 12:24:47 AM 2680 (0x0A78) Installation files will be reset and downloaded again. Looking at registry settings from other clients that use HTTPS and are working I can see the following Dword. I have got below message in target system: Begin to select client certificate ccmsetup 6/15/2017 12:24:47 Can somebody please give me an answer that actually worked to FromAD: command line = SMSSITECODE=101 CCMFIRSTCERT=1 CCMCERTSTORE=MYccmsetup01/03/2019 16:38:072612 (0x0A34) HTTPS://SCCM-Server-Dan.cork.localccmsetup01/03/2019 16:38:072612 (0x0A34) ccmsetup 6/15/2017 9:50:35 PM 2320 (0x0910) What version of Windows 11 you are deploying, Windows 11 21H2 or 22h2? Updated security on object C:\Windows\ccmsetup\cache\. ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) SMSSITECODE=101 CCMFIRSTCERT=1 CCMCERTSTORE=MY SCCM-Server-Dan.cork.local SCCM Software Updates not installing to endpoints CCMFIRSTCERT (Tells SCCM to use the certificate with the longest validity period). LocationServices 8/9/2019 11:00:29 AM 212 (0x00D4), 0 internet MP errors in the last 10 minutes, threshold is 5. '(&(ObjectCategory=mSSMSManagementPoint)(mSSMSDefaultMP=TRUE)(mSSMSSiteCode=001))' StatusCode 200, StatusText ''ccmsetup01/03/2019 16:38:072612 (0x0A34) Error 0x8004100eccmsetup01/03/2019 16:38:072612 (0x0A34) CMPInfoFromADCache requests are throttled for 00:59:59ccmsetup01/03/2019 16:38:072612 (0x0A34) ccmsetup 6/15/2017 If there is any other assistance we can provide, please feel free to let us know, we will do our best to help you. For example we have one SCCM 2012 that just does Windows 7 PCs and we built another one that will just be doing Windows 10. ccmsetup 6/15/2017 12:24:47 AM 2680 (0x0A78) Completed searching client certificates based on Certificate Issuersccmsetup01/03/2019 16:38:072612 (0x0A34) Error 0x87d00215ccmsetup01/03/2019 16:38:072612 (0x0A34) CCMFIRSTCERT: 1ccmsetup01/03/2019 16:38:072612 (0x0A34) Error 0x8004100e. Only one MP HTTPS://SCCM-Server-Dan.cork.local is specified. I'm not great with ConfigMgr logs but ADALOperationProvider.log on the endpoint comes up with "Getting AAD (device) token" with the client ID, ResourceURL, and AccountID every so often but I don't see any errors. https://www.reddit.com/r/SCCM/comments/alte6u/cb_1810_w_kb4486457_client_push_installupgrade/ and tried the solution provided by /u/cosine83? Failed to get client version for sending state messages. check the update history and software center, there is no applied update. Yes server has full control in system management container. Resolved. MANAGEDINSTALLER: 0ccmsetup01/03/2019 16:38:072612 (0x0A34) After installing 1806 and configuring certificates, I started having issues with installing clients. Only one MP HTTPS://winsccm.testlab.com Opens a new window is specified. Actually you're right, I get the same error when using the Go http client to make the request so Chrome knows the CA but not Go so it looks like the CA is not loaded properly as you said. Successfully deleted task 'Configuration Manager Client Retry Task'ccmsetup01/03/2019 16:38:072612 (0x0A34) Is it a factor also for the updates not deploying to client computer? Unable to find any Certificate based on Certificate Issuersccmsetup01/03/2019 16:38:072612 (0x0A34) Use it. Service Pack (0.0). dism.exe /online /norestart /enable-feature /ignorecheck /featurename:"IIS-WebServerRole" /featurename:"IIS-WebServer" /featurename:"IIS-CommonHttpFeatures" /featurename:"IIS-StaticContent" /featurename:"IIS-DefaultDocument" /featurename:"IIS-DirectoryBrowsing" /featurename:"IIS-HttpErrors" /featurename:"IIS-HttpRedirect" /featurename:"IIS-WebServerManagementTools" /featurename:"IIS-IIS6ManagementCompatibility" /featurename:"IIS-Metabase" /featurename:"IIS-WindowsAuthentication" /featurename:"IIS-WMICompatibility" /featurename:"IIS-ISAPIExtensions" /featurename:"IIS-ManagementScriptingTools" /featurename:"MSRDC-Infrastructure" /featurename:"IIS-ManagementService". Please also note that when I push client from sccm console then it does not update ccmsetup.log unless I run it manually with below logs: Current AD forest name is testlab.com, domain name is testlab.com ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)Domain joined client is in Intranet ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)DHCP entry points already initialized. SuiteMask = 272. Error 0x80004005 Local Machine is joined to an AD domainccmsetup01/03/2019 16:38:072612 (0x0A34) Best practices and the latest news on Microsoft FastTrack, The employee experience platform to help people thrive at work, Expand your Azure partner-to-partner network, Bringing IT Pros together through In-Person & Virtual events. IsSslClientAuthEnabled - Determining provisioning mode state failed with 80070002. Distribution Manager requires that IIS base components be installed on the local Configuration Manager Site Server in order to create the virtual directory? Failed to send location message to 'HTTPS://SCCM-Server-Dan.cork.local'. \\SCCM-Server-Dan.cork.local\SMSClientccmsetup01/03/2019 16:38:072612 (0x0A34) I haven't seen real example of using TLS so I am not entirely sure I am doing the right thing. No registry ', Completed validation of Certificate [Thumbprint B2400DEC508EBAACE84613AE21A33F4F59683BD0] issued to 'PTW01CISWB001. ENDPOINT FOCUS, the E Logo and the composite ENDPOINT FOCUS & E Logo are registered trademarks and owned by Endpoint Focus Pty Ltd as trustee for Endpoint Focus Trust. /config:MobileClient.tcf ccmsetup 6/15/2017 9:50:35 PM 3220 Failed to get directory list from 'HTTPS://site server name/CCM_Client'. Yes i have enough disk space and no maintenance windows on the device collection. Can anyone explain each one to me? We are not in a write filter maintenance mode. ', Begin validation of Certificate [Thumbprint 259ECEA46C3DAC33F0B5838C5B82E36B1BD872E3] issued to 'ptw01ciswb001. In ServiceMainccmsetup01/03/2019 16:38:072612 (0x0A34) Hope everything goes well. ccmsetup 6/15/2017 9:50:35 PM 3220 Error 0x87d00215 "Check configuration settings of the CMG service is up to . None ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Possible cause can be the distribution Manager requires that IIS base components be installed on the local Configuration Manager Site Server in order to create the virtual directory. Did you try the suggestion in that thread including settingCCMFIRSTCERT=1 CCMCERTSTORE=MY? You may correct me but theDistribution Manager requires that IIS base components be installed on the local Configuration Manager Site Server in order to create the virtual directory? Client is on internet (0x0C94) Certificate Issuer 1 [CN=SCCM-Server-Dan.cork.local]ccmsetup01/03/2019 16:38:072612 (0x0A34) Command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice /ignoreskipupgrade /config:MobileClient.tcfccmsetup01/03/2019 16:38:072612 (0x0A34) Sharing best practices for building any app with .NET. No MPs were specified from commandline or the mobileclient.tcf. Getupdate -failed to get targated update error= 0x87d00215 Already on GitHub? and it is saying that the client computer is compliant. My speculation is that CA is not loaded properly (e.g., due to the wrong path, etc.). It may help others who have similar issue with you. Message with STATEID='100' will not be sent. \\winsccm.testlab.com\SMSClient ccmsetup 6/15/2017 9:50:35 PM 3220 (0x0C94) Client re-install error Unable to find any Certificate based on Certificate Issuers Failed to get client certificate for transportation. You can post now and register later. ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)Begin checking Alternate Network Configuration ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)Finished checking Alternate Network Configuration ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)Current AD forest name is testlab.com, domain name is testlab.com ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)Domain joined client is in Intranet ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)Current AD site of machine is Default-First-Site-Name ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)Attempting to query AD for assigned site code ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)Performing AD query: '(&(ObjectCategory=MSSMSRoamingBoundaryRange)(|(&(MSSMSRangedIPLow<=3232240486)(MSSMSRangedIPHigh>=3232240486))))' ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)Performing AD query: '(&(ObjectCategory=mSSMSSite)(|(mSSMSRoamingBoundaries=192.168.19.0)(mSSMSRoamingBoundaries=Default-First-Site-Name)))' ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)Failed to get assigned site from AD. My CMG connection point is installed on a 2012 R2 non-Azure AD Hybrid Joined server slated for upgrade to 2019 later this year. Checking the URL 'HTTPS://site server name/CCM_Client/ccmsetup.cab' Sending Fallback Status Point message to 'SCCM-Server-Dan.cork.local', STATEID='101'. Ccmsetup command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice /ignoreskipupgrade /config:MobileClient.tcfccmsetup01/03/2019 16:38:072612 (0x0A34) Error code = 0x80070002 ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)Params to send '5.0.8412.1004 Deployment "C:\Windows\ccmsetup\ccmsetup.exe" ' ccmsetup 6/16/2017 9:09:51 PM 432 (0x01B0)Sending message with STATEID='322' via the existing client. Ccmsetup command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice but if I scroll up enough in the log I do find an error "Failed to get client certificate for transportation.