SCCM 2012 Client Install Failing ONLY on 8.1 Machines - Advice?

Question

Good morning,
I've got a rather interesting situation.  We have a SCCM 2012 site configured for https, the site server is acting as the MP and DP, and we are installing the client via the SCCM 2012 Client GPO.  Our cert is an InCommon cert.  We have 4000+
Windows 7 machines that are able to install the client.  We tested on a Window 8 machine and the client install works as well.  Whenever a Windows 8.1 machine tries to install it fails.  We have checked the boundaries (we can't specify IP ranges
since we don't manage the whole network).  I can manually browse to the source files on the MP/DP.  The switches we use when installing via the GPO are /usepkicert /mp:[redacted] CCMHTTPSSTATE=63 SMSSITECODE=[redacted] SMSCACHESIZE=12288.  However,
it always fails with:
<![LOG[GetDPLocations failed with error 0x80004005]LOG]!><time="09:33:26.329+300" date="03-13-2015" component="ccmsetup" context="" type="3" thread="12944" file="siteinfo.cpp:532">
<![LOG[Failed to get DP locations as the expected version from MP 'https://[redacted]'. Error 0x80004005]LOG]!><time="09:33:26.329+300" date="03-13-2015" component="ccmsetup" context="" type="2"
thread="12944" file="ccmsetup.cpp:11261">
<![LOG[Failed to find DP locations from MP 'https://[redacted]' with error 0x80004005, status code 403. Check next MP.]LOG]!><time="09:33:26.329+300" date="03-13-2015" component="ccmsetup" context="" type="2"
thread="12944" file="ccmsetup.cpp:11117">
<![LOG[Only one MP https://[redacted] is specified. Use it.]LOG]!><time="09:33:26.330+300" date="03-13-2015" component="ccmsetup" context="" type="1" thread="12944" file="ccmsetup.cpp:10080">
<![LOG[Have already tried all MPs. Couldn't find DP locations.]LOG]!><time="09:33:26.330+300" date="03-13-2015" component="ccmsetup" context="" type="3" thread="12944" file="ccmsetup.cpp:11146">
<![LOG[MapNLMCostDataToCCMCost() returning Cost 0x1]LOG]!><time="09:33:26.332+300" date="03-13-2015" component="ccmsetup" context="" type="1" thread="12944" file="ccmutillib.cpp:5479">
<![LOG[GET 'https://[redacted]/CCM_Client/ccmsetup.cab']LOG]!><time="09:33:26.333+300" date="03-13-2015" component="ccmsetup" context="" type="1" thread="12944" file="httphelper.cpp:807">
<![LOG[Failed to successfully complete WinHttp request. (StatusCode at WinHttpQueryHeaders: 403)]LOG]!><time="09:33:26.366+300" date="03-13-2015" component="ccmsetup" context="" type="3" thread="12944"
file="httphelper.cpp:1013">
<![LOG[DownloadFileByWinHTTP failed with error 0x80004005]LOG]!><time="09:33:26.366+300" date="03-13-2015" component="ccmsetup" context="" type="3" thread="12944" file="httphelper.cpp:1081">
<![LOG[A Fallback Status Point has not been specified.  Message with STATEID='308' will not be sent.]LOG]!><time="09:33:26.367+300" date="03-13-2015" component="ccmsetup" context="" type="1"
thread="12944" file="ccmsetup.cpp:9763">
<![LOG['Configuration Manager Client Retry Task' is scheduled to run at 03/13/2015 02:33:26 PM (local) 03/13/2015 07:33:26 PM (UTC) time with arguments ' "/usepkicert" "/mp:[redacted]" "CCMHTTPSSTATE=63" "SMSSITECODE=AHC"
"SMSCACHESIZE=12288" /RetryWinTask:1'.]LOG]!><time="09:33:26.369+300" date="03-13-2015" component="ccmsetup" context="" type="1" thread="10100" file="wintask.cpp:315">
<![LOG[CcmSetup failed with error code 0x80004005]LOG]!><time="09:33:26.409+300" date="03-13-2015" component="ccmsetup" context="" type="1" thread="10100" file="ccmsetup.cpp:10879">
Anyone have any idea why this is happening only on 8.1 machines?  I can't think of where else to check.  Thanks for any help.

Answer 1

Okay, so I installed via the following:  ccmsetup.exe /usepkicert /source:C:\Client CCMHTTPSSTATE=63 SMSSITECODE=AHC SMSCACHESIZE=12288 and the client installed.  But you're right, the CCMMessaging.log is full of https errors.  I know it's
something with the cert and I've even requested new ones from the CA.  However, why what is it about 8.1 that is causing the issues?  Like I said, we have 4000 machines using the same client authentication cert and they work.  I've cut and paste
some of the log entries.  One thing to note is the \\[redacted]\sms_ahc\client\ccmsetup.exe in the beginning was using the internet FQDN.  Everything else is using the intranet location.  Does that provide any insight as to what is going
on?
\\[redacted]\sms_ahc\client\ccmsetup.exe /usepkicert /source:C:\Client CCMHTTPSSTATE=63 SMSSITECODE=AHC SMSCACHESIZE=12288
<![LOG[Successfully sent security settings refresh message.]LOG]!><time="12:43:12.834+300" date="03-16-2015" component="CcmMessaging" context="" type="1" thread="5452" file="ccmhttperror.cpp:369">
<![LOG[Successfully sent location services HTTPS failure message.]LOG]!><time="12:43:12.837+300" date="03-16-2015" component="CcmMessaging" context="" type="1" thread="5452" file="ccmhttperror.cpp:396">
<![LOG[Post to https://[redacted]/ccm_system_windowsauth/request failed with 0x87d00231.]LOG]!><time="12:43:12.837+300" date="03-16-2015" component="CcmMessaging" context="" type="2" thread="5452"
file="messagequeueproc_outgoing.cpp:442">
<![LOG[[CCMHTTP] ERROR: URL=https://[redacted]/ccm_system_windowsauth/request, Port=443, Options=63, Code=0, Text=CCM_E_BAD_HTTP_STATUS_CODE]LOG]!><time="12:45:12.880+300" date="03-16-2015" component="CcmMessaging"
context="" type="1" thread="5452" file="ccmhttperror.cpp:297">
<![LOG[Raising event:
instance of CCM_CcmHttp_Status
DateTime = "20150316174512.883000+000";
HostName = "[redacted]";
HRESULT = "0x87d0027e";
ProcessID = 8572;
StatusCode = 403;
ThreadID = 5452;
]LOG]!><time="12:45:12.883+300" date="03-16-2015" component="CcmMessaging" context="" type="1" thread="5452" file="event.cpp:715">
<![LOG[Successfully sent security settings refresh message.]LOG]!><time="12:45:12.889+300" date="03-16-2015" component="CcmMessaging" context="" type="1" thread="5452" file="ccmhttperror.cpp:369">
<![LOG[Successfully sent location services HTTPS failure message.]LOG]!><time="12:45:12.892+300" date="03-16-2015" component="CcmMessaging" context="" type="1" thread="5452" file="ccmhttperror.cpp:396">
<![LOG[Post to https://[redacted]/ccm_system_windowsauth/request failed with 0x87d00231.]LOG]!><time="12:45:12.892+300" date="03-16-2015" component="CcmMessaging" context="" type="2" thread="5452"
file="messagequeueproc_outgoing.cpp:442">