Hi Guys, Can PXE boot OK and start the delpoyment process BUT after it starts the PE environment after about a minute it then reboots and doesn't procced to the Task Sequence. Central Primary\Primary\Secondary (PXE BOOT OSD servers) is the setup so the Secondary sites have everything distributed to them for OSD but fail to go further than the initial PXE boot, I believe it is a certificate issue but I am not dealing with that part. The log file below makes a request to the Primary site (not the central one) for what looks like a certificate request. The Secondary PXE servers are all configured with the certificates so why is it looking at the primary site? It looks like it is one or two steps away from working correctly and I've searched for answers but draw a blank. Any help appreciated. Barry <![LOG[CLibSMSMessageWinHttpTransport::Send: URL: PrimaryServer.DOMAIN.COM:443 CCM_POST /ccm_system_AltAuth/request]LOG]!><time="04:11:18.328+000" date="11-10-2010" component="TSPxe" context="" type="1" thread="448" file="libsmsmessaging.cpp:7446"> <![LOG[In SSL, but with no client cert]LOG]!><time="04:11:18.328+000" date="11-10-2010" component="TSPxe" context="" type="1" thread="448" file="libsmsmessaging.cpp:7596"> <![LOG[[TSMESSAGING] AsyncCallback(): -----------------------------------------------------------------]LOG]!><time="04:11:48.375+000" date="11-10-2010" component="TSPxe" context="" type="1" thread="448" file="libsmsmessaging.cpp:542"> <![LOG[[TSMESSAGING] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered]LOG]!><time="04:11:48.375+000" date="11-10-2010" component="TSPxe" context="" type="3" thread="448" file="libsmsmessaging.cpp:543"> <![LOG[[TSMESSAGING] : dwStatusInformationLength is 4 ]LOG]!><time="04:11:48.375+000" date="11-10-2010" component="TSPxe" context="" type="3" thread="448" file="libsmsmessaging.cpp:544"> <![LOG[[TSMESSAGING] : *lpvStatusInformation is 0x8 ]LOG]!><time="04:11:48.375+000" date="11-10-2010" component="TSPxe" context="" type="3" thread="448" file="libsmsmessaging.cpp:545"> <![LOG[[TSMESSAGING] : WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set ]LOG]!><time="04:11:48.375+000" date="11-10-2010" component="TSPxe" context="" type="3" thread="448" file="libsmsmessaging.cpp:561"> <![LOG[[TSMESSAGING] AsyncCallback(): -----------------------------------------------------------------]LOG]!><time="04:11:48.375+000" date="11-10-2010" component="TSPxe" context="" type="3" thread="448" file="libsmsmessaging.cpp:575"> <![LOG[Error. Received 0x80072f8f from WinHttpSendRequest.]LOG]!><time="04:11:48.375+000" date="11-10-2010" component="TSPxe" context="" type="1" thread="448" file="libsmsmessaging.cpp:7665"> <![LOG[sending with winhttp failed; 80072f8f. retrying.]LOG]!><time="04:11:48.375+000" date="11-10-2010" component="TSPxe" context="" type="1" thread="448" file="libsmsmessaging.cpp:7671">

On the Properties page of your site, on the Site Mode tab, try to clear checkbox for "Enable CRL checking on clients".

Thanks for the quick reply, it is already unchecked on both the Central Primary and the Primary site, I should add that the site mode CLient settings published to AD, CRL / Allow HTTP unchecked, Certicate Store blank, Certificate Criteria is Check Only certificate Purpose and Select Any certificate that maches radio button selected. Barry

No one any ideas? This is still causing me grief :(

Hi Barry, Take a look at this thread: http://social.technet.microsoft.com/forums/en-US/configmgrosd/thread/c63434b7-9d0d-41fa-bd14-ff6ad8c62313/ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.