Windows 7, SCCM and Certificate Authorities

[sllorep]

Hi All ,

This is my first post here - but I have been reading for a number of years now. I'm at a school in Bedfordshire.

 

Due to a number of staffing changes that I am far from comfortable with, Windows 7 deployment has been put on the back burner for way too long now and it is now starting to get a bit embarrassing (especially as we are an ICT and Maths Specialist school). Anyway I am now trying to resurrect the project but I currently don’t have the expertise to figure out some of the problems I’m having with it.

Would anyone here be able to help – or even spare some time to come to us, or for me to come to you and see how you progressed through the Windows 7 rollout?

 

Ok, so – before the last member of my team left, we had a basic Windows 7 install working through SCCM, booting to PXE and installing. Now though I can’t build anything as it stalls at the following:

Pending Request ID: 5760

Contacting Server: 172.16.25.7

TFTP Download: smsboot\x86\abortpxe.com

PXE Boot aborted. Booting to next device…

 

I think I am also having problems with the Certificate Authority that we have set up and as we are running SCCM in Native rather than Mixed mode which uses the certificates I think this could be part of the problem. I have an Offline Master and an Online Issuing CA machines, no intermediate. The Online Issuing server is “Unable To Download” the AIA and CDP Locations – I really am a novice at PKI and CA’s, help would be really appreciated!

 

Many thanks if anyone can offer assistance or help (I can post more information if needed).

 

Ash

[jsnetman]

I setup SCCM a while ago for testing purposes and was getting the same sort of error. Was due to not having a recognisable boot image which I used from a standard win7 installation cd. Once I imported the boot image which comes with WAIK it worked fine. Maybe SCCM/WDS is not seeing the boot image, it may have been moved since your guy left. Did not go near the native mode as certificate setup for me is a nightmare so can't help you on that one.

[jsnetman]

You could also rollout win7 with just WDS and WAIK, thats what we do here, win 7 is very kind on different machine types, we have one image that does the lot. You need to inject a few drivers into the image from time to time but thats about it.

[Gatt]

This is more than likely a certificate error.

What certificates have you create for SCCM? (I'm guessing you have at least a site certificate as you said you're in Native Mode)

Have you created Client and PXE certificates from your CA and setup the auto-enrollment policy in Group Policy?

 

Also, wth the "abortpxe" error - it may just be a case of clearing the last PXE assginment for the clients..

 

A good source of info for SCCM is http://www.windows-noob.com

[sllorep]

Argh, yup - I was a numpty and copied the new W7SP1 boot.wim from the disk rather than importing the AIK with W7SP1 (AIK 3.1).

 

So that’s got my Windows 7 builds running again for now… until I run into another problem.

 

I would still like some help with the certificates if anyone knows anything?

 

Many thanks,

Ash.

[sukh]

Hi

 

What issues are you having with certificates?

Gatt has also asked a few questions I'd ask

 

Sukh

[sllorep]

Yeah, sorry - I was just excited about getting on with W7...

 

I have a Root CA certificate to enable Native Mode, PXE certs, and auto-enrollment is enabled. I just cant get the AIA and CDP locations to download.