Internet Clients & Mac Enrollment

Question

Hello,
I'm having some issues with Internet Clients and Mac Enrollment, the latter via both the Intranet and Internet.  Going over all the certificate steps again, the only thing I didn't do is have two FQDN for the Web Cert since I'm using the same FQDN for
both internal and external traffic.  We have the external DNS setup and ports opened on the firewall to communicate with it.  External DNS resolution is working when doing a DIG or an NSLOOKUP with the trailing '.' due to the default domain suffix
search.
 Are there some added steps that I need to do when using the same FQDN for internal and external?

Answer 1

All roles are on a single server.  I've ensured that the DP Cert is imported into the DP.
The DP certificate is not an, or the, issue in this case, because it's only used during OS deployment. Please start looking at the client log files when the download error appears (like the CAS.log).
About the MAC issues, please keep that separated from this post, for two reason:
Troubleshooting can be done better per issue;
You've got a post already for that (http://social.technet.microsoft.com/Forums/windowsserver/en-US/f473a2bb-3eba-42fd-88c0-3a232b18a556/configmgr-r2-mac-os-enrollment-issues?forum=configmanagerdeployment).
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude
Thanks.
I combined both issues because I thought they may be related but I'll stick to the Windows Internet Clients for this one.
We have a Palo Alto Firewall and have opened up several ports and applications and watched traffic.  The client still shows 'currently Internet' but the logs say the following:
LocationServices.log
LsRefreshManagementPointEx failed with 0x80004005
Failed to refresh security settings over MP with error 0x80004005.
Failed to send management point list Location Request Message to FQDN
LSUpdateInternetManagementPoints: Failed to retrieve internet MPs from MP FQDNwith error 0x87d00231, retaining previous list.
CcmMessaging.log
Post to http://FQDN/ccm_system/request failed with 0x87d00231.
Post to http://FQDN/ccm_system/request failed with 0x87d00231.
Post to http://FQDN/ccm_system_windowsauth/request failed with 0x87d00231.Post to http://FQDN/ccm_system_windowsauth/request failed with 0x87d00231.
OutgoingMessage(Queue='mp_[http]mp_locationmanager', ID={68E61B1F-05F4-4BD4-81E0-C9AF513635EE}): Will be discarded (expired).
Ports needed for Internet-based Clients have been added from this: http://technet.microsoft.com/en-us/library/hh427328.aspx#BKMK_IBCMports