SCCM HTTPS

[lmrogers]

Good Afternoon,

 

I have just setup a brand new instance of SCCM Current Branch and built my task sequence and deployed applications.

 

I have then setup and changed all communications to HTTPS and now my task sequence is failing. I suspect this is because the computer I'm trying to run the task sequence on does not have a valid certificate on.

 

Has anyone had this before?

[free780]

You may need to update your boot images if the TS is running from WinPE. If from normal Windows you need certificate enrolment setup via group policy. Edited May 30, 2018 by free780

[lmrogers]

So I have got GPO set and enrolling clients which is working fine. The task sequence will be running on PCs that won't have ever been domain joined. I have imported the certificate into SCCM console and set everything to HTTPS then updated the distribution points with the boot images.

 

How should I be adding the certificates to the boot images?

[free780]

I think you just update the content. Then test a TS.

[lmrogers]

Yeah that's what I thought and done. My first step in the task sequence is to restart in Windows PE then go through and apply operating system. But it is failing on the first step with 0x80070002. Only since changing everything to HTTPS.

[Steve21]

Have you setup your network access account etc? 70002's are normally that the account being used can't access the share/files, and when HTTP is enabled it's normally also allowing anonymous connections so if you disabled that it requires direct accounts to connect.

 

Steve

[lmrogers]

Yeah, I have even removed and re-added the network access accounts and they verified fine.

[Steve21]

And when it fails in the logs can you manually browse to the https url its using?

 

Steve