{"id":264,"date":"2012-05-24T11:15:22","date_gmt":"2012-05-24T15:15:22","guid":{"rendered":"http:\/\/rajdude.com\/blog\/?p=264"},"modified":"2012-05-29T10:41:34","modified_gmt":"2012-05-29T14:41:34","slug":"my-third-attempt-at-installing-sccm-2012","status":"publish","type":"post","link":"https:\/\/rajdude.com\/blog\/my-third-attempt-at-installing-sccm-2012\/","title":{"rendered":"My third attempt at installing SCCM 2012"},"content":{"rendered":"<p>Today I am making another attempt at installing SCCM 2012. Who knew it would be this difficult just to install SCCM! Wow.<\/p>\n<p>Anyway, I am running the installer again&#8230;.At the database config screen I am entering the same old information of my database&#8230;.lets see if that works this time. Ooops! error! Here is what it looks like:<\/p>\n<p><a href=\"http:\/\/rajdude.com\/blog\/wp-content\/uploads\/2012\/05\/db-error-3rd-attempt.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-270\" title=\"db-error-3rd-attempt\" src=\"http:\/\/rajdude.com\/blog\/wp-content\/uploads\/2012\/05\/db-error-3rd-attempt.jpg\" alt=\"\" width=\"413\" height=\"187\" srcset=\"https:\/\/rajdude.com\/blog\/wp-content\/uploads\/2012\/05\/db-error-3rd-attempt.jpg 413w, https:\/\/rajdude.com\/blog\/wp-content\/uploads\/2012\/05\/db-error-3rd-attempt-300x135.jpg 300w\" sizes=\"auto, (max-width: 413px) 100vw, 413px\" \/><\/a><\/p>\n<p>Ok&#8230;.lets take a look at that KB article&#8230;<\/p>\n<p>Nothing comes off as wrong to me. so I look into the setup log file which is c:\\ConfigMgrSetupWizard.log<\/p>\n<p>I see this message at the bottom:<\/p>\n<p>5\/24\/2012 11:20:57 AM: ConfigMgrSetupWizard Information: 1 : Creating SQL connection to database master on server xxx.xxx.com. 5\/24\/2012 11:20:58 AM: ConfigMgrSetupWizard Information: 1 : Sql connection is established. 5\/24\/2012 11:20:58 AM: ConfigMgrSetupWizard Information: 1 : Creating SQL connection to database master on server xxx.xxx.com. 5\/24\/2012 11:20:58 AM: ConfigMgrSetupWizard Information: 1 : Sql connection is established. 5\/24\/2012 11:20:58 AM: ConfigMgrSetupWizard Error: 1 : <strong>Unsupported SQL version 10.50.2500.0<\/strong><\/p>\n<p>uh-oh&#8230;. \ud83d\ude41 I am actually trying to connect to a wrong DB server! The DB server which I updated earlier [I blogged about the procedure <a title=\"Installing updates on SQL Server 2008\" href=\"http:\/\/rajdude.com\/blog\/installing-updates-on-sql-server-2008\/\">here<\/a>] is a different DB server. My bad!<\/p>\n<p>Lets correct it. done&#8230;. after that I still get an error. This time it is different:<\/p>\n<p>&nbsp;<\/p>\n<p>5\/24\/2012 12:01:11 PM: ConfigMgrSetupWizard Error: 1 : Exception message: [A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: TCP Provider, error: 0 &#8211; No connection could be made because the target machine actively refused it.)], Exception details: [System.Data.SqlClient.SqlException: A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: TCP Provider, error: 0 &#8211; No connection could be made because the target machine actively refused it.)<\/p>\n<p>This is very strange&#8230;<\/p>\n<p>{Eureka moment comes now!}<\/p>\n<p><strong>I solved the issue<\/strong>&#8230;or rather I found out what I was doing wrong. Since I am NOT using a named instance for SCCM 2012&#8230; I am required to use dymanic ports in SQL server TCP\/IP config. According to all documentation and blogs I am supposed to <em>disable dynamic ports<\/em>. However that is valid ONLY if you use a named instance for SCCM. If you are [strange] like me&#8230;trying to use a default instance for SCCM2012&#8230;.you gotta <em>enable dynamic ports<\/em> for TCP\/IP.<\/p>\n<p>I was blindly following blogs like <a href=\"http:\/\/matthewdpeters.wordpress.com\/2012\/04\/03\/installing-sql-server-2008-for-use-with-system-center-configuration-manager-2012-rc\/#comments\">these<\/a>\u00a0without customizing the instructions for my own situation!..oh well \ud83d\ude41<\/p>\n<p>Anyway, after correcting the problem, the installer proceeds normally and comes to the prerequisite check. At that point it give me 4 warnings [none of them are show stoppers]. I click on the &#8220;Begin Install&#8221; button with bated breath \ud83d\ude42<\/p>\n<p>No luck \ud83d\ude41 I got this error:<\/p>\n<p><a href=\"http:\/\/rajdude.com\/blog\/wp-content\/uploads\/2012\/05\/sccm-cert-error.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-276\" title=\"sccm-cert-error\" src=\"http:\/\/rajdude.com\/blog\/wp-content\/uploads\/2012\/05\/sccm-cert-error-300x225.jpg\" alt=\"\" width=\"300\" height=\"225\" srcset=\"https:\/\/rajdude.com\/blog\/wp-content\/uploads\/2012\/05\/sccm-cert-error-300x225.jpg 300w, https:\/\/rajdude.com\/blog\/wp-content\/uploads\/2012\/05\/sccm-cert-error-399x300.jpg 399w, https:\/\/rajdude.com\/blog\/wp-content\/uploads\/2012\/05\/sccm-cert-error.jpg 739w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Upon googling I found <a href=\"http:\/\/social.technet.microsoft.com\/Forums\/en-US\/configmanagerdeployment\/thread\/01083567-4ac1-44b1-97ea-b6a55fb8150d\" target=\"_blank\">this thread<\/a>.\u00a0I tried the suggestion:<\/p>\n<blockquote><p>\u00a0After reviewing a trace of the installer running, they found it failing to create the certificate because the CNG Key Isolation (KeyIso, lsass.exe) service was not running.<\/p><\/blockquote>\n<p>That did not work \ud83d\ude41 for me.<\/p>\n<p>The second suggestion is:<\/p>\n<blockquote><p>Make sure the service account running your SQL services is in the local administrators group so that it also takes ownership and full control of the directory and that should allow the SCCM install to assign the self-signed certificate via that account.<\/p><\/blockquote>\n<p>Trying out this one now and re-running the install&#8230;&#8230;and NO&#8230;that did not fix it either \ud83d\ude41<\/p>\n<p>Then I found <a href=\"http:\/\/myitforum.com\/myitforumwp\/2012\/04\/18\/sccm-2012-install-failed-to-create-sql-server-certificate\/\" target=\"_blank\">another web page<\/a>. It talks about deleting a registry key:<\/p>\n<pre>HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\SMS<\/pre>\n<p>Nope! that did not work either!<\/p>\n<p>There is a SPN suggestion which I am going to try out next at <a href=\"http:\/\/social.technet.microsoft.com\/Forums\/en-US\/configmanagerdeployment\/thread\/01083567-4ac1-44b1-97ea-b6a55fb8150d\" target=\"_blank\">this web page<\/a>:<\/p>\n<blockquote><p>I&#8217;ve set my sql spn like this:<\/p>\n<p>setspn -A MSSQLSvc\/S-SCCM.domain.local:1433 mydomain\\SQLService<\/p>\n<p>setspn -A MSSQLSvc\/S-SCCM:1433 domain\\SQLService<\/p>\n<p>SQLService is your SQL service account<\/p>\n<p>domain is your domainname<\/p>\n<p>1433 is the default port<\/p>\n<p>This is the technet howto: <a href=\"http:\/\/http:\/\/technet.microsoft.com\/en-us\/library\/bb735885\">Link<\/a><\/p><\/blockquote>\n<p>Too bad&#8230;it\u00a0still did not work. I am running out of options here \ud83d\ude41<\/p>\n<p>Lets try deleting the registry key [discussed above] and try again&#8230;<\/p>\n<p>no luck! This sucks!<\/p>\n<p>ok, so my nice DBA pointed me to a webpage where this guy is talking about <a href=\"http:\/\/www.configurationmanager2012.com\/Configuration-Manager-02.html\" target=\"_blank\">creating a certificate manually<\/a>. Hmmm I saw this page yesterday. Lets try it out.[later] well this did not pan out&#8230;I dont have a CA here in our AD. However, I\u00a0foung another <a href=\"http:\/\/www.myitforum.com\/forums\/m234124-print.aspx\" target=\"_blank\">web page <\/a>which talks about &#8220;My remote SQL server already has an certificate set up for Server Authentication&#8221; and still it does not work.<\/p>\n<p>So MAYBE I need a 64bit OS for the SQL box? Lets see if I can build a 64bit VM for this test.<\/p>\n<p>ok so we already\u00a0 have a SQL server 2008 R2 database running on Windows 2008 R2 64bit here. It is an RnD server so I can play around with it. Lets <a title=\"Updating SQL Server 2008 R2 for use with SCCM 2012\" href=\"http:\/\/rajdude.com\/blog\/updating-sql-server-2008-r2-for-use-with-sccm-2012\/\">start updating it<\/a>.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Today I am making another attempt at installing SCCM 2012. Who knew it would be this difficult just to install SCCM! Wow. Anyway, I am running the installer again&#8230;.At the database config screen I am entering the same old information of my database&#8230;.lets see if that works this time. Ooops! error! Here is what it looks like: Ok&#8230;.lets take a look at that KB article&#8230; Nothing comes off as wrong to me. so I look into the setup log file which is c:\\ConfigMgrSetupWizard.log I see this message at the bottom: 5\/24\/2012 11:20:57 AM: ConfigMgrSetupWizard Information: 1 : Creating SQL connection to database master on server xxx.xxx.com. 5\/24\/2012 11:20:58 AM: ConfigMgrSetupWizard Information: 1 : Sql connection is established. 5\/24\/2012 11:20:58 AM: ConfigMgrSetupWizard Information: 1 : Creating SQL connection to database master on server xxx.xxx.com. 5\/24\/2012 11:20:58 AM: ConfigMgrSetupWizard Information: 1 : Sql connection is established. 5\/24\/2012 11:20:58 AM: ConfigMgrSetupWizard Error: 1 : Unsupported SQL version 10.50.2500.0 uh-oh&#8230;. \ud83d\ude41 I am actually trying to connect to a wrong DB server! The DB server which I updated earlier [I blogged about the procedure here] is a different DB server. My bad! Lets correct it. done&#8230;. after that I still get an error. This time it is different: &nbsp; 5\/24\/2012 12:01:11 PM: ConfigMgrSetupWizard Error: 1 : Exception message: [A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: TCP Provider, error: 0 &#8211; No connection could be made because the target machine actively refused it.)], Exception details: [System.Data.SqlClient.SqlException: A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: TCP Provider, error: 0 &#8211; No connection could be made because the target machine actively refused it.) This is very strange&#8230; {Eureka moment comes now!} I solved the issue&#8230;or rather I found out what I was doing wrong. Since I am NOT using a named instance for SCCM 2012&#8230; I am required to use dymanic ports in SQL server TCP\/IP config. According to all documentation and blogs I am supposed to disable dynamic ports. However that is valid ONLY if you use a named instance for SCCM. If you are [strange] like me&#8230;trying to use a default instance for SCCM2012&#8230;.you gotta enable dynamic ports for TCP\/IP. I was blindly following blogs like these\u00a0without customizing the instructions for my own situation!..oh well \ud83d\ude41 Anyway, after correcting the problem, the installer proceeds normally and comes to the prerequisite check. At that point it give me 4 warnings [none of them are show stoppers]. I click on the &#8220;Begin Install&#8221; button with bated breath \ud83d\ude42 No luck \ud83d\ude41 I got this error: Upon googling I found this thread.\u00a0I tried the suggestion: \u00a0After reviewing a trace of the installer running, they found it failing to create the certificate because the CNG Key Isolation (KeyIso, lsass.exe) service was not running. That did not work \ud83d\ude41 for me. The second suggestion is: Make sure the service account running your SQL services is in the local administrators group so that it also takes ownership and full control of the directory and that should allow the SCCM install to assign the self-signed certificate via that account. Trying out this one now and re-running the install&#8230;&#8230;and NO&#8230;that did not fix it either \ud83d\ude41 Then I found another web page. It talks about deleting a registry key: HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\SMS Nope! that did not work either! There is a SPN suggestion which I am going to try out next at this web page: I&#8217;ve set my sql spn like this: setspn -A MSSQLSvc\/S-SCCM.domain.local:1433 mydomain\\SQLService setspn -A MSSQLSvc\/S-SCCM:1433 domain\\SQLService SQLService is your SQL service account domain is your domainname 1433 is the default port This is the technet howto: Link Too bad&#8230;it\u00a0still did not work. I am running out of options here \ud83d\ude41 Lets try deleting the registry key [discussed above] and try again&#8230; no luck! This sucks! ok, so my nice DBA pointed me to a webpage where this guy is talking about creating a certificate manually. Hmmm I saw this page yesterday. Lets try it out.[later] well this did not pan out&#8230;I dont have a CA here in our AD. However, I\u00a0foung another web page which talks about &#8220;My remote SQL server already has an certificate set up for Server Authentication&#8221; and still it does not work. So MAYBE I need a 64bit OS for the SQL box? Lets see if I can build a 64bit VM for this test. ok so we already\u00a0 have a SQL server 2008 R2 database running on Windows 2008 R2 64bit here. It is an RnD server so I can play around with it. Lets start updating it. &nbsp;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[37,29],"class_list":["post-264","post","type-post","status-publish","format-standard","hentry","category-itsys","tag-sccm-2012","tag-system-administration"],"_links":{"self":[{"href":"https:\/\/rajdude.com\/blog\/wp-json\/wp\/v2\/posts\/264","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rajdude.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rajdude.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rajdude.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rajdude.com\/blog\/wp-json\/wp\/v2\/comments?post=264"}],"version-history":[{"count":22,"href":"https:\/\/rajdude.com\/blog\/wp-json\/wp\/v2\/posts\/264\/revisions"}],"predecessor-version":[{"id":268,"href":"https:\/\/rajdude.com\/blog\/wp-json\/wp\/v2\/posts\/264\/revisions\/268"}],"wp:attachment":[{"href":"https:\/\/rajdude.com\/blog\/wp-json\/wp\/v2\/media?parent=264"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rajdude.com\/blog\/wp-json\/wp\/v2\/categories?post=264"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rajdude.com\/blog\/wp-json\/wp\/v2\/tags?post=264"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}