ConfigMgr 2007: Clients not installed - RegTask: Failed to get certificate. Error: 0x80004005

We're starting to see a couple of these issues roll in so I thought a heads up might be in order.  This solution comes from Brian Shaw, one of our top gun support Engineers our in Charlotte, NC:


Issue: Some clients may not show as being installed when viewed through the System Center Configuration Manager 2007 admin console.  From the target computers themselves the agents appear to function properly. When viewing the ClientLocation.log file you may also see the following error:

RegTask: Failed to get certificate. Error: 0x80004005

Cause: This is caused by an issue with the RSA machine keys on the client.

Resolution: To resolve this issue complete the following steps:

  1. Backup all files in the C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys folder (or the corresponding folder on your specific clients).
  2. Restart the SMS Agent Host Service to recreate these certificates.
  3. At this point the clients should start showing up in the console.  If not, remove and push the client agent to the affected computers again.


I hope you don't get this issue yourself but if you do then at least know you'll know how to fix it.  Thanks Brian!


J.C. Hornbeck | Manageability Knowledge Engineer