Edit

Error when downloading ConfigMgr.AdminUIContent.cab by using SMS_DMP_DOWNLOADER or ServiceConnectionTool.exe

  • Article

When you use service connection point online mode or the service connection tool to download updates in Configuration Manager, you receive an AdminUIContentDownload error message.

Original product version:   Configuration Manager (current branch)
Original KB number:   4561945

Symptoms

  • If you have the service connection point (SMS_DMP_DOWNLOADER) set to online mode, you may notice that no new Configuration Manager releases appear in the console. Also, the following error entry is logged in the DmpDownloader.log file:

    Redirected to URL https://configmgrbits.azureedge.net/adminuicontent/ConfigMgr.AdminUIContent.cab~~
    Got fwdlink and recreating the httprequest/response~~
    ERROR: Failed to download Admin UI content payload with exception: The underlying connection was closed: An unexpected error occurred on a send.~~
    Failed to call AdminUIContentDownload. error = Error -2146233079~

  • You have the service connection point set to offline mode. You use the service connection tool (ServiceConnectionTool.exe) to download and import updates in Configuration Manager. Also, the following error entry is logged in the ServiceConnectionTool.log file:

    ERROR:AdminUIContentDownloadDownload:DownloadManifestCab exception: The underlying connection was closed: An unexpected error occurred on a send. There may be an issue with internet connection or the download link.

Cause

This issue occurs in one of the following situations:

  • TLS 1.2 isn't enabled for .NET Framework on the computer that's running the online service connection point or service connection tool. TLS 1.2 is required to download the .cab file.
  • The specific URLs that are required by the service connection point aren't included in the allowlist on your firewall or proxy server.

Resolution

Note

  • If you haven't already, consider upgrading the server that hosts the service connection point to Windows Server 2016 or later versions.
  • Make sure you have all internet rules and exceptions set up for your proxy or firewall to allow the service connection point to access internet endpoints. For more information, see Internet Access Requirement and Configuration Manager proxy exceptions.
  • Make sure the following cipher suites are enabled on the server that hosts the service connection point:
    • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)
    • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)
    • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9f)
    • TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x9e)

On the computer that runs the online service connection point or service connection tool, enable TLS 1.2. In particular, if .NET Framework updates are installed, set the following registry values, and then restart the computer:

Subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319

Values:

  • SystemDefaultTlsVersions = DWORD:00000001
  • SchUseStrongCrypto = DWORD:00000001

For more information about the specific URLs that are required by the service connection point, see Service connection point.

Workaround

  1. From the error in the DMPDownloader.log file, copy the URL and manually download the .cab file.
  2. Copy the .cab file to the <ConfigMgr Install Dir>\Inboxes\HMAN.box\CFD folder.
  3. Monitor the HMAN.log file for processing details.