Problem installing a secondary site
I'm working with SCCM 2012 and having issues installing a particular secondary site. I have already successfully installed 12 other secondary sites without a problem. During site installation the ConfigMgrSetup.log file on the secondary site
server indicates successful completion but as the site tries to establish its' first sql service broker connection to the primary site server db the sql server log on the primary site db gives this error.
"Service Broker login attempt failed with error: 'Connection handshake failed. The certificate used by the peer in invalid due to the following reason: Certificate not found: State 89"
The hman.log file on the secondary site server gives this set of statements repeatedly
Update site server active directory informtion into DB
Time to verify if the parent[ABC] sql server certificate is still valid on site [DEF] sql server.
Cannot get SQL Certificate from Site ABC
CheckParentSQLServerCertificate: Failed to get SQL certificate fot site ABC
I've checked the master db on the secondary site server via "select * from master.sys.certificates" and the serial number and the thumbprint of the service broker certificate for the primary site server db server matches what is in the master database on
the primary site server.
I also checked the master db on the primary site server db server via "select * from master.sys.certificates" and do not see the service broker certificate for the secondary site server. The secondary site server's inboxes\hman.box\pubkey folder
contains a .TMP file with some readable information. I've stopped and restarted all the SQL and SCCM services on the secondary site server to no avail.
Does anybody have any ideas why the service broker certificate is not getting transferred to the primary site server so the service broker connection can be made to complete the secondary site server installation?
August 13th, 2012 4:43am