SCCM Current Branch 1706 KB4042345.
After you upgrade to Configuration Manager, version 1706, clients cannot download content from peer cache sources. An error that resembles the following is recorded in the Contenttransfermanager.log file:
CContentTokenMgr::EncryptToken – Failed Base64Decode cert context
Cause
This issue occurs when the client uses the peer source’s NetBIOS name instead of its fully qualified domain name (FQDN) to get additional information about the connection.
Hotfix information
NOTE: This update does not apply to installations of Configuration Manager, version 1706, that were downloaded after September 13, 2017.
This hotfix updates the MP_GetSuperPeerContentLocations stored procedure.
This hotfix is available for installation in the Updates and Servicing node of the Configuration Manager console on sites that have the older version of this stored procedure. If the update is not listed for a given site, it is not required for that site.
If the service connection point is in Offline mode, you must reimport the update.