Issue with Settting up SCCM IBCM server

Question

I am having issues with our SCCM IBCM server.  I have set up a dedicated server just for this purpose, installing MP, DP, componet Server, Site System, and Software Update point. I specified the FQDM with an external IP address, and have applied it
our external DNS, and I am able to ping it.  However, when I go into Software center to test a deployment, it gets an error stating it is unable to download.  Checking the LocationServices Log I see this (I've obfuscated my FQDN and site code):
Failed to send management point list Location Request Message to FQDM.local.net LocationServices 12/8/2014 4:37:15 PM 1564 (0x061C)
LSUpdateInternetManagementPoints: Failed to retrieve internet MPs from MP FQDM.local.net with error 0x87d00231, retaining previous list. LocationServices 12/8/2014 4:37:15 PM 1564 (0x061C)
There is no AMP for site code 'ABC'. Nulling existing entry in WMI LocationServices 12/8/2014 4:37:15 PM 1564 (0x061C)
Persisted Default Management Point Locations locally LocationServices 12/8/2014 4:37:15 PM 1564 (0x061C)
Refreshing the Management Point List for site ABC LocationServices 12/8/2014 4:37:15 PM 1564 (0x061C)
[CCMHTTP] AsyncCallback(): ----------------------------------------------------------------- LocationServices 12/8/2014 4:37:15 PM 1564 (0x061C)
[CCMHTTP] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered LocationServices 12/8/2014 4:37:15 PM 1564 (0x061C)
[CCMHTTP] : dwStatusInformationLength is 4
LocationServices 12/8/2014 4:37:15 PM 1564 (0x061C)
[CCMHTTP] : *lpvStatusInformation is 0x10
LocationServices 12/8/2014 4:37:15 PM 1564 (0x061C)
[CCMHTTP] : WINHTTP_CALLBACK_STATUS_FLAG_CERT_CN_INVALID is set
LocationServices 12/8/2014 4:37:15 PM 1564 (0x061C)
[CCMHTTP] AsyncCallback(): ----------------------------------------------------------------- LocationServices 12/8/2014 4:37:15 PM 1564 (0x061C)
Raising event:
instance of CCM_CcmHttp_Status
ClientID = "GUID:041EFC3C-D559-45EE-8B0E-528E8BD051DA";
DateTime = "20141208213715.907000+000";
HostName = "FQDM.local.net";
HRESULT = "0x80072f8f";
ProcessID = 2788;
StatusCode = 16;
ThreadID = 1564;
LocationServices 12/8/2014 4:37:15 PM 1564 (0x061C)
Failed to send request to /SMS_MP/.sms_aut?MPLIST2&ABC at host FQDM.local.net, error 0x2f8f LocationServices 12/8/2014 4:37:15 PM 1564 (0x061C)
[CCMHTTP] ERROR: URL=https://FQDM.local.net/SMS_MP/.sms_aut?MPLIST2&ABC, Port=443, Options=31, Code=12175, Text=ERROR_WINHTTP_SECURE_FAILURE LocationServices 12/8/2014 4:37:15 PM 1564 (0x061C)
Successfully sent location services HTTPS failure message. LocationServices 12/8/2014 4:37:15 PM 1564 (0x061C)
Executing Task LSSiteRoleCycleTask LocationServices 12/8/2014 4:37:15 PM 3896 (0x0F38)
Ignoring MP error during post-rotation flush period of 20 seconds. LocationServices 12/8/2014 4:37:15 PM 3896 (0x0F38)
0 internet MP errors in the last 10 minutes, threshold is 5. LocationServices 12/8/2014 4:37:15 PM 3896 (0x0F38)
Failed to retrieve MP List for site code 'ABC' LocationServices 12/8/2014 4:37:15 PM 1564 (0x061C)
MPLIST requests are throttled for 00:03:40 LocationServices 12/8/2014 4:37:15 PM 3892 (0x0F34)
Unexpected row count (0) retrieved from AD. LocationServices 12/8/2014 4:37:16 PM 1564 (0x061C)
Not sure what to do at this point.

Answer 1

That did seem to resolve part of the issue I was having, the issue was when I deployed the certificate for the IBCM I defaulted it to Build from AD, and not Supply at request.  So I duplicated the template on our CA, made the change, and enrolled it
on our just IBCM server.  I exported it, so I could apply it to the Distribution settings on the Primary server, I also modified the IIS bindings on the IBCM sever to use this new certificate. However, when I try to install a program, it still fails.
 In the LocationServices Log, I am seeing this:
Executing Task LSMPCommSuccessTask LocationServices 12/10/2014 8:27:50 AM 3952 (0x0F70)
Reset internet MP error count LocationServices 12/10/2014 8:27:50 AM 3952 (0x0F70)
Using INF MP FQDN.Domain.com as lookup MP. LocationServices 12/10/2014 8:29:10 AM 756 (0x02F4)
Attempting to retrieve default management points from lookup MP(s) via HTTPS LocationServices 12/10/2014 8:29:10 AM 756 (0x02F4)
LSGetManagementPointsForSiteFromManagementPoint: Client is on Internet, skipping Intranet MP list request. LocationServices 12/10/2014 8:29:10 AM 756 (0x02F4)
Unable to retrieve compatible MP(s) from AD LocationServices 12/10/2014 8:29:10 AM 756 (0x02F4)
LSGetManagementPointsForSite: Domain joined client is in Internet - INF MP will be used to get other INF MPs. LocationServices 12/10/2014 8:29:10 AM 756 (0x02F4)
LSUpdateInternetManagementPoints LocationServices 12/10/2014 8:29:10 AM 756 (0x02F4)
No Location Reply received from FQDN.Domain.com LocationServices 12/10/2014 8:29:10 AM 756 (0x02F4)
LSUpdateInternetManagementPoints: Failed to retrieve internet MPs from MP FQDN.Domain.com with error 0x80004005, retaining previous list. LocationServices 12/10/2014 8:29:10 AM 756 (0x02F4)
There is no AMP for site code 'ABC'. Nulling existing entry in WMI LocationServices 12/10/2014 8:29:10 AM 756 (0x02F4)
Persisted Default Management Point Locations locally LocationServices 12/10/2014 8:29:10 AM 756 (0x02F4)
Raising event:
instance of CCM_CcmHttp_Status
ClientID = "GUID:041EFC3C-D559-45EE-8B0E-528E8BD051DA";
DateTime = "20141210132911.624000+000";
HostName = "FQDN.Domain.com";
HRESULT = "0x00000000";
ProcessID = 1756;
StatusCode = 0;
ThreadID = 1644;
LocationServices 12/10/2014 8:29:11 AM 1644 (0x066C)
Raising event:
instance of CCM_CcmHttp_Status
ClientID = "GUID:041EFC3C-D559-45EE-8B0E-528E8BD051DA";
DateTime = "20141210132918.171000+000";
HostName = "FQDN.Domain.com";
HRESULT = "0x00000000";
ProcessID = 1756;
StatusCode = 0;
ThreadID = 1644;
LocationServices 12/10/2014 8:29:18 AM 1644 (0x066C)