Configuration Manager OSD Error 80072f8f Invalid CA Certificate

配置管理器 屏幕显示 错误 80072f8f Invalid CA 证书.

In the smsts.log file using CMTrace you can see the next 错误:

Sending with winhttp failed; 80072f8f. retrying
Retrying and Ignoring date security failures.
AsyncCallback() WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered
dwstatusinformationlength is 4
WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set
sending with winhttp failed; 80072f8f

If your SMSTS.log file contains:

WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA

This means problems with SCCM 证书. Without a 证书, 这 PXE and media boot clients won’t trust the CA that issued the certs which is your issue.

1. Under the Site Properties (SCCM Console\Administration\Site Configuration\Sites) 打开 特性 of the site.
2. 导航至 the Communication Security 选项卡, select the Root CA and restart the WDS service.