question

AhmedMS-9022 avatar image
0 Votes"
AhmedMS-9022 asked AhmedMS-9022 commented

Client unable to register with the CM site

Hello all,

I've seen some issues recently related to multiple devices that are connected to the network (LAN or VPN) but the client status is showing "Inactive", I've uninstalled the client and installed it from scratch manually. The client now is installed but it fails to be registered with the MP, I have the following error message in ClientIDStartupManager.log:

[RegTask] - Client is not registered. Sending registration request for GUID:4E13F2E2-4FD2-40AA-A5F3-817F8FA6DB4A
RegTask: Failed to send registration request message. Error: 0x87d00231

LocationServices.log is showing that the MP is correctly assigned, ClientLocation seems OK too.

Command used to install the CM Client: ccmsetup.exe /mp:siteserver.domain.local SMSSITECODE=CM1 FSP=siteserver.domain.local /AllowMetered

ccmsetup.log showing "CcmSetup is exiting with return code 0" in the end.

CM Site version: 5.0.9040.1019
Client OS version: Windows 10 20H2 Enterprise

117360-client-not-resitred.png

Could you please help me to fix this issue?


Best regards,

mem-cm-general
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

YoussefSaad avatar image
1 Vote"
YoussefSaad answered AhmedMS-9022 commented

Hi @AhmedMS-9022,

I've seen this error before, it was related to the metered connection that was enabled in the network card settings. Check if this option is enabled, disable it and check again the CcmMessaging.log and ClientIDManagerStartup.log files.

If the issue persists, uninstall the client and install it again without "/AllowMetered" option.

Regards,


Youssef Saad | Blog: https://youssef-saad.blogspot.com
Please remember to “Accept answer” or upvote for useful answers, thank you!

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks a lot Youssef, it's working now.

0 Votes 0 ·
Amandayou-MSFT avatar image
1 Vote"
Amandayou-MSFT answered AhmedMS-9022 edited

Hi @AhmedMS-9022,

0x87d00231 = "transient error"

This is typical of a network related issue between the two endpoints (the client and MP in this case).

Have we validated the network path between this client and the MP? Kindly use this following ways to check if it is normal.
https://www.manishbangia.com/how-to-verify-sccm-mp-health/
Note: Non-Microsoft link, just for the reference.

Besides, please try the steps:
1.Uncheck the check box of Clients check the CRL for site systems from Site Properties.
2.Reinstalled client with /NoCRLCheck CCMHOSTNAME=InternetFQDN with SMSSite code switches.

For the reference:
https://social.technet.microsoft.com/Forums/en-US/907fe750-3282-4f9e-b75a-f6e29696c30c/regtask-failed-to-send-registration-request-message-error-0x87d00231?forum=configmanagerdeployment



If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @Amandayou-MSFT,

Thank you so much for your time and feedback.

The CRL check is already disabled, I have tried with /NoCRLCheck, still the same behavior.

There is no issue with +70% of devices with the same MP, but I got the following message when I've tried to check the MP health:

https://<MP FQDN>/sms_mp/.sms_aut?mplist

117992-mp-health.png

The devices are on LAN and we don't have internet clients.

0 Votes 0 ·
mp-health.png (11.8 KiB)
AhmedMS-9022 avatar image
0 Votes"
AhmedMS-9022 answered Amandayou-MSFT commented

I've noticed that I've multiple warnings in the MP component, like the following:

117920-mp-warnings.png


Regards,


mp-warnings.png (11.6 KiB)
· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

Please check if there is the similar error in CcmMessaging:
[CCMHTTP]: WINHTTP_CALLBACK_STATUS_FLAG_CERT_REV_FAILED is set

If it exists, it means that Internet client registration fails certificate revocation check over SSL after installation.

Could we know if the environment is PKI, and on the side of client, have we configure client certificate correctly? According to the warnings in the MP component, Mp has rejected the connection from client.

Best regards,
Amanda

0 Votes 0 ·

I can see the following error in the CcmMessaging.log file:

Request to http://MPFQDN/ccm_system/request cannot be fulfilled since use of metered network is not allowed.
Post to https://MPFQDN/ccm_system/request failed with 0x87d00231

Yes, the environment is configured with PKI and the client certificate is correctly configured.

Thank you Amanda for your time.

0 Votes 0 ·

Since our environment is configured with PKI, please check PKI Certificates for SCCM deployment step by step to troubleshoot this issue.

Kindly refer to this article:
https://www.prajwaldesai.com/deploy-pki-certificates-for-sccm-2012-r2/
Note: Non-Microsoft link, just for the reference.

Best regards,
Amanda

0 Votes 0 ·