Thursday, December 5, 2019

Cloud Management Gateway connection issues when using AzureAD authentication - StatusCode=401 StatusText=CMGConnector_Unauthorized

Hi All,

Just dropping a quick post regarding an issue we encountered recently when setting up a new Cloud Management Gateway and attempting to use only AzureAD based authentication.

In our case we were using Intune to deploy the Configuration Manager client, and the CCMSetup service was getting installed but the CCMSetup.log was displaying some of the following errors when trying to perform the installation:
RetrieveTokenFromStsServerImpl failed with error 0x87d0027e

Failed to get CCM access token and client doesn't have PKI issued cert to use SSL. Error 0x80070002

DownloadFileByWinHTTP failed with a non-recoverable failure, 0x87d00455

[CCMHTTP] ERROR INFO: StatusCode=401 StatusText=CMGConnector_Unauthorized

We were expecting to also find an CCM_STS.log file on the Managment Point, but it was not present at all. Digging in to the IIS traffic logs, we noticed that attempts to access the CCM_STS site were receiving a 302 response, indicating a redirect was occurring.

This specific server we were using to hold the MP role also had the Application Catalog role installed (this was slated to be removed in the very near future). The Application Catalog role configured an IIS redirect on the default web site so that all requests to the server were getting redirected to the Application catalog. Simply disabling the redirect and restarting IIS was enough to get our client install working across the CMG using AAD authentication with no PKI required. I'd wager that this issue is extremely unlikely to affect another ConfigMgr environment as most folks have likely removed all of their application catalog roles by now, but I figured this was such an odd scenario that it would be worth a blog post in case it can help someone else out.


2 comments:

  1. Jumanji: The Magic of a Casino - JT Hub
    Jumanji: The Magic 통영 출장샵 of a Casino. Jumanji is a card game developed 안동 출장마사지 by Microgaming 경주 출장샵 Solutions, 구미 출장마사지 LLC 강릉 출장마사지 and was released for Windows 8/8/7. Download.

    ReplyDelete
  2. NBA Picks – every day free picks in opposition to the unfold and over beneath totals for all regular season and playoff games. The season ends with our NBA 우리카지노 Championship picks for the seven recreation sequence. Brian Pempus is a Penn State journalism graduate who has covered the U.S. playing business since 2009, beginning with Card Player Magazine in Las Vegas. He was later Deputy Editor of sports betting at Better Collective and Managing Editor at The Game Day, before becoming a member of Forbes Betting as Lead Editor in 2022. Keeping that in mind, don’t bounce into sports betting with the expectation that you’re going to win each guess you place (you won’t) and make life-changing money . You completely can flip a revenue betting sports, identical to find a way to|you possibly can} enjoying in} the stock market.

    ReplyDelete