Unable to install SCCM client on Windows Server 2008 R2 - certificate permission error?

I am trying to comply with corporate policy, which is, have an SCCM agent or client on every Windows device. I have successfully used the provided SCCM installer on other Windows 2008 R2 servers. However for one particular server I cannot get the SCCM agent
to install successfully. I've searched forums and documentation, but can't find a solution. Part of the problem is the lack of feedback by SCCM on what is wrong. I think I have narrowed down the symptom to the following error messages from the "C:\Windows\CCM\Logs\ClientIDManagerStartup.log":
[LOG[Certificate [Thumbprint C559304C1598F17641D0732EB9EB787169A25FA7] issued to 'SMS' doesn't have private key or caller doesn't have access to private key.
[LOG[Failed in GetCertificate(...): 0x87d00281]LOG]!><time="10:56:59.014+300" date="04-17-2014" component="ClientIDManagerStartup" context="" type="3" thread="3024" file="ccmcert.cpp:2122">
[LOG[CCMCreateAuthHeaders failed (0x8009200b).]LOG]!><time="10:56:59.014+300" date="04-17-2014" component="ClientIDManagerStartup" context="" type="3" thread="3024" file="clientauthutil.cpp:978">
When I use the Certificates MMC snap in to look at installed certs on this Windows Server 2008 R2 machine, there are plenty of normal and expected certificates there. There is also a branch called SMS with hundreds of entries, I have no idea what that is.
The above error seems to indicate a permissions issue. What do I do to fix this SCCM install? It seems like a server cert issue, not an SCCM issue, so I'm posting to the Windows Server forums.
Thanks in advance.
Thanks

this maybe helpful...
http://www.jamesbannanit.com/2011/04/certificate-requirements-for-sccm-2012/
should be asked in SCCM forum...
http://social.technet.microsoft.com/Forums/en-US/home?forum=configmanagerdeployment
Best,
Howtodo

Similar Messages

Unable to install SAP B1 on Windows server 2008 R2

Hi
I am unable to install the SAP Business one 2007 B PL00 on Windows server 2008 R2.
Environment is set as following :
1. SQL SERVER 2008 Installed on Server A
2. SAP B1 to be installed on Server B
3 Both servers are in domain
4.Firewall is off
5. ODBC Connection is tested Successfully
6 Port is also seem to be ok.
But after Installing server tool, when trying to install the Server , in server type nothing is displayed.
I also checked the connecting SQL server from the instance .
Please help is this is related to compatibility of Windows server 2008 R2 with 2007 B or so .
Thanks & Regards
RP

Windows server 2008 R2 is not a supported OS for a lower 2007 version. You need to install a higher version.
Hi Gordon ,
It means I have to install SAP 2007 B PL10 afterwards upgrade it to the latest patch level .
But searching in the forms , i have seen some bopdy installed the SAP 2007 B PL15 on Windows server 2008 R2.
Thanks in advance
Regards
RP

Installing Microsoft Office on Windows Server 2008 R2

Can I install Microsoft Office on Windows Server 2008 R2?
I'm not trying to use this installation from client machines, I just want to use this installation from the same machine.
It's a Home LAN, I need to develop some applications, but basically, the server should be used as any other machine by any member of the family.
Each machine will have it's own suite of Office Applications. It's just 3 machines
Believe you can do it, and you will!!

Yes, I've done that successfully, but I use the Volume Licensing edition (Professional Plus).
http://technet.microsoft.com/en-us/library/ee624351(v=office.14).aspx
If you have a Retail edition, it might not be as successful...
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Problems installing OBIEE 11g on Windows Server 2008 64 bit

Hi, I'm trying to install OBIEE 11g on Windows Server 2008 64 bit (standard edition, SP2), and it's blowing up running the installer. The installer gets past the first couple of "info" screens, but blows up prior to coming to the first "real" screen with an error:
Microsoft Visual C++ Assertion Failed:
Program: ...
File: ../../../src/share/native/sun/font/t2k/t2kstrm.c
Line: 132
Expression: pos <= t->maxPos
Has anyone seen this and/or have an idea how to work around this? Note that I did do the prerequisite download / install of the 2005 Visual C++ 64 bit libraries.
Thanks,
Scott

Just to close the loop on this thread, this does indeed seem to be some sort of font / java issue on our servers. I've been completely unable to get the install to work using the GUI. However, if I run it from command line using the -silent and -response paramaters along with a proper response file, the install went perfectly. I'm going to continue working the SR with Oracle - don't want to be stuck using -silent mode when things get more complicated, but at least now I can move forward.
If anyone else has a better workaround - please let me know. "Silent" mode is workable, but difficult and time consuming.
Thanks,
Scott

Unable to install Forfront TMG 2010 on Server 2008 R2 with Service Pack1

Hi I am Installing TMG 2010 on Server 2008R2 with service pack 1 ... then I am getting the error as below snapshot...kindly help me out
and I 've check event log then please find below snapshot :

Hi,
It seems that you have created an similar thread below:
Unable to install Forfront TMG 2010 on Server 2008 R2 with SP1
Since you have installed Service Pack 1 for Windows Server 2008 R2, please refer to the KB below:
Event ID 10 is logged in the Application log after you install Service Pack 1 for Windows 7 or Windows Server 2008 R2
If the solutions in the thread above are not helpful, please feel free to contact us.
Best regards,
Susie

Can I install Acrobat in a Windows Server 2008 for many users?

I'm looking for a solution for my enterprise to install Adobe Acrobat in Windows Server 2008 R2, where the users connect by remote desktop. I'm looking for a form for they use Acrobat by the same form they uses now Reader. But not for all, only for some of this users.
I called a responsible and he told me that I can install Acrobat for some users in Windows Server 2008 R2, but I'm not sure if that solution will be legal.
Can I buy a special license for it or I have to buy a license for each user? How can I proceed to do this, if it's possible?
Thanks in advance for you attention!

Use a mozilla.cfg file in the Firefox program folder to lock prefs or specify default values.
Place a file local-settings.js in the defaults\pref folder where you also find the file channel-prefs.js to specify using mozilla.cfg.
pref("general.config.filename", "mozilla.cfg");
pref("general.config.obscure_value", 0); // use this to disable the byte-shift
See:
* http://kb.mozillazine.org/Locking_preferences
You can use these functions in mozilla.cfg:
defaultPref(); // set new default value
pref(); // set pref, but allow changes in current session
lockPref(); // lock pref, disallow changes
<pre><nowiki>lockPref("app.update.enabled", false);</nowiki></pre>

I am trying to install Oracle 9i on Windows Server 2008

Hi
I am trying to install Oracle 9i on Windows Server 2008.
While installing third CD it shows the following error message
"jrew.exe has stopped working"
Please guide me what to do next as early as possible.
Thanks

Why?
The general policy of Oracle is very simple:
it certifies against the current version of the OS.
It never re-certifies against new releases of the OS.
Windows 2008 didn't exist when Oracle 9i was released.
Sybrand Bakker
Senior Oracle DBA

Installing Adobe CS6 on Windows Server 2008

I'm trying to install Adobe CS6 on Windows Server 2008 to share up Indesign and InCopy via Citrix Presentation Server v6. The Adobe Extensions manager does not work properly and there for the InDesign application will not load properly becasue the extension/plugins are not being installed correctly. Cirtix requires that applications are inatlled via the Winowdows application installation tool
Is there a prescribed/recommended way to perform the installation of Adobe CS6 on Windows Server 2008?

BerrisAnderson neither InDesign or InCopy are designed to work in the environment you have described. Please see Technical support boundaries for virtualized or server-based environments - http://helpx.adobe.com/creative-suite/kb/technical-support-boundaries-virtualized-or.html for more details.

Installing Oracle 10g on Windows Server 2008

Hi,
I want to install Oracle 10g on Windows Server 2008. As per Oracle, I should install 10.2.0.3 and then apply patchset 10.2.0.4.
For that, one has to sign in to metalink which is possible only for customers. I am
using Oracle only for educational purposes for now. Is there any other way of using Oracle 10g on Windows 2008?
Thanks,
Vladi

Of course if you don't have support and for educational purpose only , you should compromise a little by either install other OS or get virtual machine like VMware.
Or stay with 10.2.0.3, that should work in most cases.

Installing Weblogic 12c on windows server 2008

Trouble installing Weblogic 12 on windows server 2008 ,i have oracle 11g databse in the same system.Now i am trying to install Oracle Weblogic 12 ,but WLS requires JDK 1.6 as a minimum ,after i install the Oracle11g database it automatically installed the Jdk 1.5 ..now how can i go about and install Weblogic 12 .

install JDK 6 or 7. Load the environment variables from CMD.EXE
set JAVA_HOME = RUTA_DEL_JDK_6_OR_7
set PATH =%JAVA_HOME%\BIN;% PATH%
Then, from the same terminal (cmd.exe) run the weblogic runInstaller.exe 12c.

I am unable to install itunes in my windows 7 laptap. Getting 2349 error code while installing itunes. Any suggestions to overcome?

I am unable to install itunes in my windows 7 laptap. Getting 2349 error code while installing itunes. Any suggestions to overcome?

Is this the error your gettings?
If so, remove the installer, and redownload the itunes set-up installer
www.apple.com/itunes/download
Message was edited by: keeferaf

Unable to install sccm client from SCCM console install client option

Hi
Unable to install client on windows 7 64 bit enterprise from sccm console. The client is discovered in sccm console with status client = NO, so we want to install sccm client from console remotely.
We cannot enable push install. my id has full access on SCCM site server SCCM product also admin rights on workstations. I am able to access net bios path SMS_<site code> of site server then client path from client machine. machine is in domain and
is boundry of sccm .
Client push install in console is diabled
Regards Sushain KApoor

Hi!
Examine the ccm.log located in <SCCM 2007 InstallationPath>\LOGS on the site server.
Best regards
Henrik

Installation of Client Access role fails on Windows Server 2008 R2 (Execution of: "$error.Clear(); Install-ExchangeCertificate -services "IIS, POP, IMAP")

Hello
I am trying to install Exchange Server 2010 beta 1 onto a Windows Server 2008 R2 (build 7000) machine which has also been set up as a domain controller.
However when attempting to install the Client Access role, setup fails with the error below.
Does anyone know of a way to get around this please?
I have already searched for this error and not found any similar threads.
Also every time I press the code button on this forum it crashes the browser and I keep losing the message! (IE8 from within Server R2). Also the message box is very small, will not expand and keeps jumping to the top.
Thanks
Robin
[code]
Summary: 4 item(s). 1 succeeded, 1 failed.
Elapsed time: 00:00:01
Preparing Setup
Completed
Elapsed Time: 00:00:00
Client Access Role
Failed
Error:
The execution of: "$error.Clear(); Install-ExchangeCertificate -services "IIS, POP, IMAP" -DomainController $RoleDomainController", generated the following error: "Could not grant Network Service access to the certificate with thumbprint 2F320F5D5B5C6873E54C8AB57F604D8AFA31D18C because a cryptographic exception was thrown.".
Could not grant Network Service access to the certificate with thumbprint 2F320F5D5B5C6873E54C8AB57F604D8AFA31D18C because a cryptographic exception was thrown.
Access is denied.
Elapsed Time: 00:00:01
Mailbox Role
Cancelled
Finalizing Setup
Cancelled
[/code]
Robin Wilson

Hello
Thanks for all the replies.
I have since wiped the system and installed everything again and it all worked this time so not sure what was wrong last time. I did try to uninstall all Exchange components and then uninstall IIS and Application server, reboot and re-install but I received the same error still when it came to installing the client access role.
Walter: I just attempted the standard installation which should have used the default self-signed certificate. Everything was a fresh install done at the same time on a freshly formatted PC.
For info last time when it failed to work:
- Installed Windows Server 2008 R2
- Installed Domain Controller role using dcpromo. I set the forest and domain as Windows Server 2008 R2
- Added a forest trust between main domain and test Exchange domain (set up as ex2010.local)
- Installed IIS and Application Server role
- Installed Hyper-v role
- Installed Desktop Experience feature
- Installed Exchange and recieved the error
When it worked I set up the forest and domain in Windows Server 2008 mode (i.e. not R2), installed Exchange first and then set up the forest trust and then Hyper-v. It did say it failed to configure dns which was probably because it started trying to do automatic updates half way through the dcpromo! DNS seems to work ok though.
I did notice this time that Hyper-v gave a warning about the virtual network adapter not being set up correctly and the local network did not work correctly although I could access the internet. Not sure if this could have been related to the cause of the problem previously. For now I have disabled the virtual network until I get time to try and get it working and so the mail will work in the meantime.
I also noticed that Hyper-v added an extra 443 ssl binding to the default website so as it had 2 bindings on port 443 it refused to start. After deleting one it worked.
I decided to install Exchange onto a domain controller as it is only a test and I wouldn't do it in a live environment. I am also short of test machines! It didn't give me any warnings about this actually, I think previous versions warn you that it is not recommended.
Andreas and Chinthaka: I did not know about the requirement to run the domain at 2003 mode. The main domain is running in 2008 mode with Exchange 2007 so I assume this is just a temporary beta related requirement. It does seem to be working (second attempt) so far in a 2008 mode domain although I haven't had a chance to fully test it yet.
Thanks
Robin
P.S. Sorry it's taken me a while to reply!
Robin Wilson

Unable to install Essentials Role on Windows Server Technical Preview (VHD)?

Hi
Having a problem trying to install Essentials Role on Windows Server Technical Preview (VHD)
After reboots, AD installs, I get Configuration encountered some issues in Results wizard.
Updating an preparing your server... 68% completed then it fails with following error.
"An error occurred while configuring Windows Server Essentials. Please try again."
Trying again same error.
Anyone able to get this installed?
TIA

Hi,
I did the same test without any problem.
You could try it again to check the result.
If it does not help, please refer to this kb article:
http://support.microsoft.com/kb/2914651
Regards.
Vivian Wang

Oracle 8.1.7.3 client on Windows Server 2008 64bit

Hi all!
I'm a newbie to Oracle and this forum, so please be gentle...:)
I'm trying to install Oracle 8.1.7.3 client on a 64bit Windows Server 2008, without success. Best result I got so far is 'installed' client and provider, but unable to run the config tools, or use the provider. I installed the same client on a 32bit version of Win Server 2008 and it worked with few minor tweaks.
Reason I'm doing this is trying to integrate an old legacy Oracle 7 database with SQL Server 2008 using linked servers.
Upgrading to a recent version is not an option.
Anyone has any guidelines? please help, this is driving me nuts!
Thanx,
Igor

user12219185 wrote:
hmmm i'm trying the download on http://edelivery.oracle.com, but can't find 64bit client.. it has 64bit database version, which is 2 cds... is the client included?
The client is included. Download it and start the installation. It should give you an option to select 'client only'.

Unable to install SCCM client on Windows Server 2008 R2 - certificate permission error?

Similar Messages

Maybe you are looking for