question

RaimondiAnthonyCognizant-1354 avatar image
0 Votes"
RaimondiAnthonyCognizant-1354 asked RaimondiAnthonyCognizant-1354 commented

Client Install Error

Hi Guys

On a couple of VDis I am installing SCCM client on it installs correctly with a 0 code but I look in the ClientIDStartManager.log I see the error

Regtask: Failed to get certificate . Error 0x80004005

I dont use PKI and its only happening on like 5 VDIs.

Anyone see this error?

msc-essentials
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DJ4MS-5286 avatar image
0 Votes"
DJ4MS-5286 answered RaimondiAnthonyCognizant-1354 commented

Hi RaimondiAnthonyCognizant,

I think you have permissions problem for machine key starts with 19c5cf.. located under C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys

Ensure 'CNG Key Isolation' Service is not disabled. If you find it disabled, then change it to Manual and save the changes to service.

Note - Please take backup copy of MachineKeys folder before proceeding below -

Resolution:

Correct permission for the file that starts with 19c5cf.. under C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys folder
Expected permissions :
System: full control
Local Administrators: read and execute
Restart SMS Agent Host service after setting permissions should create the certificate

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you I will try that and let you know!

0 Votes 0 ·

Same error unfortunately

0 Votes 0 ·
XinGuo-MSFT avatar image
0 Votes"
XinGuo-MSFT answered RaimondiAnthonyCognizant-1354 commented

Hi,

Please try to delete all files in the C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys folder.
Restart the SMS Agent Host Service to recreate these certificates.
At this point the clients should start showing up in the console. If not, remove and push the client agent to the affected computers again.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.