Invoke-Command & Add-CMDistributionPoint - Certificate failure

Question

Hi together,
for automatic creation of Distribution Points I am doing the following things.
Doing this locally on the Primary Site Server as Network Access Account everything works fine.
But when I try to do this with invoke-command on my machine with Network Access Account too, I'll get an error:
WARNING: The self signed certificate could not be created successfully.
What am I doing wrong?
Here is what I am doing locally:
Write-Host "------------------NOW Running on REMOTE Primary Site----------------" -BackgroundColor Yellow -ForegroundColor Black
if(!(Test-Path $RemoteSCCMModule))
Write-Error "Could not find Remote SCCM Module!"
Exit
Write-Debug "Importing SCCM Module..."
Import-Module $RemoteSCCMModule -Force
$SiteLocation = $SiteCode + ":"
Set-Location $SiteLocation | Out-Null
if(($BoundaryName -ne "") -and ($BoundaryName -ne " ") -and ($BoundaryName -ne $null) -and ($BoundaryName -ne $false))
$BoundaryValue = $BoundaryStartIP + "-" + $BoundaryEndIP
New-CMBoundary -DisplayName $BoundaryName -BoundaryType IPRange -Value $BoundaryValue
New-CMBoundaryGroup -Name $BoundaryGroupName
Add-CMBoundaryToGroup -BoundaryGroupName $BoundaryGroupName -BoundaryName $BoundaryName
New-CMSiteSystemServer -ServerName $using:NewDPServer -SiteCode $using:SiteCode
Start-Sleep -Seconds 2
Add-CMDistributionPoint -SiteSystemServerName $NewDPServer -SiteCode $SiteCode -MinimumFreeSpaceMB $MinimumFreeDiskSpace -EnablePxeSupport -AllowRespondIncomingPxeRequest -EnableUnknownComputerSupport -ComputersUsePxePassword $PXEPassword -UserDeviceAffinity DoNotUse -PxeServerResponseDelaySeconds 5 -CertificateExpirationTimeUtc $CertExpirationDate
Start-Sleep -Seconds 2
Foreach($DPGroup in $NewDPServer_Groups)
Add-CMDistributionPointToGroup -DistributionPointGroupName $DPGroup -DistributionPointName $NewDPServer
And this is what I am doing with Invoke-Command:
Invoke-Command -ComputerName $PrimarySiteServer -ConfigurationName Microsoft.PowerShell32 -Credential $NAACred -ScriptBlock {
$DebugPreference = $using:DebugPreference
Write-Host "------------------NOW Running on REMOTE Primary Site----------------" -BackgroundColor Yellow -ForegroundColor Black
Write-Debug "Importing SCCM Module..."
Import-Module $using:RemoteSCCMModule -Force
$SiteLocation = $using:SiteCode + ":"
Set-Location $SiteLocation | Out-Null
if(($using:BoundaryName -ne "") -and ($using:BoundaryName -ne " ") -and ($using:BoundaryName -ne $null) -and ($using:BoundaryName -ne $false))
$BoundaryValue = $using:BoundaryStartIP + "-" + $using:BoundaryEndIP
New-CMBoundary -DisplayName $using:BoundaryName -BoundaryType IPRange -Value $BoundaryValue
New-CMBoundaryGroup -Name $using:BoundaryGroupName
Add-CMBoundaryToGroup -BoundaryGroupName $using:BoundaryGroupName -BoundaryName $using:BoundaryName
New-CMSiteSystemServer -ServerName $using:NewDPServer -SiteCode $using:SiteCode
Start-Sleep -Seconds 2
Add-CMDistributionPoint -SiteSystemServerName $using:NewDPServer -SiteCode $using:SiteCode -MinimumFreeSpaceMB $using:MinimumFreeDiskSpace -EnablePxeSupport -AllowRespondIncomingPxeRequest -EnableUnknownComputerSupport -ComputersUsePxePassword $using:PXEPassword -UserDeviceAffinity DoNotUse -PxeServerResponseDelaySeconds 5 -CertificateExpirationTimeUtc $using:CertExpirationDate
Start-Sleep -Seconds 2
Foreach($DPGroup in $using:NewDPServer_Groups)
Add-CMDistributionPointToGroup -DistributionPointGroupName $DPGroup -DistributionPointName $using:NewDPServer
If you need more information what different valus of variables are i can provide.
Thank you.
Kind regards
Martin Krämer

Answer 1

Hi,
Here is the whole script - I'm still testing around this is why it is not really nice at the moment ;-) :
$DebugPreference = "Continue"
$Script:Script= $MyInvocation.MyCommand.Definition
$Script:DebugOut = "Script started: " + "$Script:Script"
Write-Debug $Script:DebugOut
$Script:ScriptPath = Split-Path -Path $Script:Script -Parent
$CertExpirationDate = (Get-Date).AddYears(100)
#region Setting_Variables
$NAACred = Get-Credential -Message "provide NetworkAccessAccount credentials:" -UserName "test.loc\NAA_User"
[string]$RemoteSCCMModule = "D:\ConfigMgr\AdminConsole\bin\ConfigurationManager.psd1"
[string]$PrimarySiteServer = "Test-Primary"
[string]$SiteCode = "KN1"
[string]$NewDPServer = "TEST-DP.test.loc"
$PXEPassword = ConvertTo-SecureString -AsPlainText "mypass" -Force
[int]$MinimumFreeDiskSpace = 2000
[string]$BoundaryName = " "
[string]$BoundaryStartIP = "192.168.30.1"
[string]$BoundaryEndIP = "192.168.30.254"
[string]$BoundaryGroupName = "TEST-DP_Group"
[array]$NewDPServer_Groups = "04 All Aviable DPs", "01 All PXE DPs"
#endregion Setting_Variables
#region REMOTE PrimarySiteServerScript
<#
IF ($env:PROCESSOR_ARCHITECTURE -ne "x86")
Write-Debug "Powershell needs to be in x86 mode. Restarting powershell..."
$PS32exe = "$env:windir\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"
if(!(Test-Path $PS32exe))
Write-Error "x86 Powershell not found!"
exit
$powershell = [System.Diagnostics.Process]::GetCurrentProcess()
$psi = New-Object System.Diagnostics.ProcessStartInfo $powerShell.Path
$script = $MyInvocation.MyCommand.Path
$prm = $script
foreach($a in $args)
$prm += ' ' + $a
$psi.Arguments = $prm
$psi.FileName = $PS32exe
[System.Diagnostics.Process]::Start($psi) | Out-Null
exit
Else
Write-Debug "Powershell already in x86 mode..."
if(!(Test-Path $using:RemoteSCCMModule))
Write-Error "Could not find Remote SCCM Module!"
Exit
#>
<#
Invoke-Command -ComputerName $PrimarySiteServer -ConfigurationName Microsoft.PowerShell32 -Credential $NAACred -ScriptBlock {
$DebugPreference = $using:DebugPreference
Write-Host "------------------NOW Running on REMOTE Primary Site----------------" -BackgroundColor Yellow -ForegroundColor Black
Write-Debug "Importing SCCM Module..."
Import-Module $using:RemoteSCCMModule -Force
$SiteLocation = $using:SiteCode + ":"
Set-Location $SiteLocation | Out-Null
if(($using:BoundaryName -ne "") -and ($using:BoundaryName -ne " ") -and ($using:BoundaryName -ne $null) -and ($using:BoundaryName -ne $false))
$BoundaryValue = $using:BoundaryStartIP + "-" + $using:BoundaryEndIP
New-CMBoundary -DisplayName $using:BoundaryName -BoundaryType IPRange -Value $BoundaryValue
New-CMBoundaryGroup -Name $using:BoundaryGroupName
Add-CMBoundaryToGroup -BoundaryGroupName $using:BoundaryGroupName -BoundaryName $using:BoundaryName
New-CMSiteSystemServer -ServerName $using:NewDPServer -SiteCode $using:SiteCode
Start-Sleep -Seconds 2
Add-CMDistributionPoint -SiteSystemServerName $using:NewDPServer -SiteCode $using:SiteCode -MinimumFreeSpaceMB $using:MinimumFreeDiskSpace -EnablePxeSupport -AllowRespondIncomingPxeRequest -EnableUnknownComputerSupport -ComputersUsePxePassword $using:PXEPassword -UserDeviceAffinity DoNotUse -PxeServerResponseDelaySeconds 5 -CertificateExpirationTimeUtc $using:CertExpirationDate
Start-Sleep -Seconds 2
Foreach($DPGroup in $using:NewDPServer_Groups)
Add-CMDistributionPointToGroup -DistributionPointGroupName $DPGroup -DistributionPointName $using:NewDPServer
#>
#endregion REMOTE PrimarySiteServerScript
#region LOCAL PrimarySiteServerScript
Write-Host "------------------NOW Running on REMOTE Primary Site----------------" -BackgroundColor Yellow -ForegroundColor Black
if(!(Test-Path $RemoteSCCMModule))
Write-Error "Could not find Remote SCCM Module!"
Exit
Write-Debug "Importing SCCM Module..."
Import-Module $RemoteSCCMModule -Force
$SiteLocation = $SiteCode + ":"
Set-Location $SiteLocation | Out-Null
if(($BoundaryName -ne "") -and ($BoundaryName -ne " ") -and ($BoundaryName -ne $null) -and ($BoundaryName -ne $false))
$BoundaryValue = $BoundaryStartIP + "-" + $BoundaryEndIP
New-CMBoundary -DisplayName $BoundaryName -BoundaryType IPRange -Value $BoundaryValue
New-CMBoundaryGroup -Name $BoundaryGroupName
Add-CMBoundaryToGroup -BoundaryGroupName $BoundaryGroupName -BoundaryName $BoundaryName
New-CMSiteSystemServer -ServerName $using:NewDPServer -SiteCode $using:SiteCode
Start-Sleep -Seconds 2
Add-CMDistributionPoint -SiteSystemServerName $NewDPServer -SiteCode $SiteCode -MinimumFreeSpaceMB $MinimumFreeDiskSpace -EnablePxeSupport -AllowRespondIncomingPxeRequest -EnableUnknownComputerSupport -ComputersUsePxePassword $PXEPassword -UserDeviceAffinity DoNotUse -PxeServerResponseDelaySeconds 5 -CertificateExpirationTimeUtc $CertExpirationDate
Start-Sleep -Seconds 2
Foreach($DPGroup in $NewDPServer_Groups)
Add-CMDistributionPointToGroup -DistributionPointGroupName $DPGroup -DistributionPointName $NewDPServer
#endregion LOCAL PrimarySiteServerScript
Thank you for help :-)