Configuration Manager OSD Error 80072f8f Invalid CA Certificate

Publicado em fevereiro 18, 2024

1 Leitura mínima

Gerenciador de configuração OSD Erro 80072f8f Invalid CA Certificado.

In the smsts.log file using CMTrace you can see the next erro:

Sending with winhttp failed; 80072f8f. retrying
Retrying and Ignoring date security failures.
AsyncCallback() WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered
dwstatusinformationlength is 4
WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set
sending with winhttp failed; 80072f8f

If your SMSTS.log file contains:

WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA

This means problems with SCCM certificado. Without a certificado, o PXE and media boot clients won’t trust the CA that issued the certs which is your issue.

Under the Site Properties (SCCM Console\Administration\Site Configuration\Sites) abrir Properties of the site.
Navegue até the Communication Security aba, select the Root CA and restart the WDS service.