SCCM KB4575790.
A client update is available to resolve the following issues with the Configuration Manager client setup program (ccmsetup.exe).
1. When a cloud management gateway (CMG) is configured to use a cloud distribution point, ccmsetup.exe is unable to download the client installation file (ccmsetup.cab) from Azure blob storage. This leads to increased CMG traffic. It also delays installation or upgrade of the client because it will fall back to use another management point if available. Errors resembling the following are recorded in the ccmsetup.log on the client.
[CCMHTTP] ERROR: URL=https://{Azure_blob_storage}:443/content-l0000003/ccmsetup.cab?..., Port=443, Options=224, Code=0, Text=CCM_E_BAD_HTTP_STATUS_CODE
[CCMHTTP] ERROR INFO: StatusCode=400 StatusText=Authentication information is not given in the correct format. Check the value of Authorization header.2. Internet-facing clients that only use PKI client certificates for authentication are unable to install or upgrade after installation of the following update rollup.
This occurs if the option Use PKI client certificate (client authentication capability) when available is disabled on the Communication Security tab of Site Properties. Errors resembling the following are recorded in the ccmsetup.log file on the client.
Client is not allowed to use PKI issued certificate or not able to use AAD token or ContentToken thus can not talk in HTTPS.
Failed to download client files by BITS. Error 0x8000ffff
