Configuration Manager OSD Error 80072f8f Invalid CA Certificate

Configuration Manager OSD Error 80072f8f Invalid CA Certificate.

In the smsts.log file using CMTrace you can see the next error:

Sending with winhttp failed; 80072f8f. retrying
Retrying and Ignoring date security failures.
AsyncCallback() WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered
dwstatusinformationlength is 4
WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set
sending with winhttp failed; 80072f8f

If your SMSTS.log file contains:

WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA

This means problems with SCCM certificate. Without a certificate, the PXE and media boot clients won’t trust the CA that issued the certs which is your issue.

1. Under the Site Properties (SCCM Console\Administration\Site Configuration\Sites) open Properties of the site.
2. Navigate to the Communication Security tab, select the Root CA and restart the WDS service.