OSD : Retrieving policy for this computer

Vid3al 91 Reputation points
2023-10-18T08:14:14.4866667+00:00

CM 2303.

Any Dell computer model, we always get this error:

"Retrieving policy for this computer"

An error occured while retrieving policy fot this computer (0x80004005)

We noticed that the certificate on the Distribution Point that has the PXE feature active, has expired.

  1. Should the certificate automatically be renewed, or do I have to do it manually?
  2. If the certificate does not automatically renew, can I renew it manually?
  3. To manually renew the certificate, is it sufficient to enter a new date in the "Communication" TAB from the "Properties" of the distribution point?
  4. When I renew the certificate, which LOG should I monitor to understand if the renewal was successful?
  5. Is it normal that with the expired certificate, the normal software distribution in the software center continues to work?

Thank you for your support.

Microsoft Configuration Manager Updates
Microsoft Configuration Manager Updates
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Updates: Broadly released fixes addressing specific issue(s) or related bug(s). Updates may also include new or modified features (i.e. changing default behavior).
1,005 questions
Microsoft Configuration Manager Deployment
Microsoft Configuration Manager Deployment
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Deployment: The process of delivering, assembling, and maintaining a particular version of a software system at a site.
929 questions
Microsoft Configuration Manager Application
Microsoft Configuration Manager Application
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Application: A computer program designed to carry out a specific task other than one relating to the operation of the computer itself, typically to be used by end users.
467 questions
Microsoft Configuration Manager
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. AllenLiu-MSFT 42,356 Reputation points Microsoft Vendor
    2023-10-19T06:03:38.24+00:00

    Hi, @Vid3al

    Thank you for posting in Microsoft Q&A forum.

    1. The certificate on the Distribution Point that has the PXE feature active should be automatically renewed. However, if it does not renew automatically, you can renew it manually.
    2. To manually renew the certificate, you can update the date or time in the "Communication" tab from the "Properties" of the distribution point.
    3. After renewing the certificate, you should monitor the Distmgr.log and Smsdpprov.log files to understand if the renewal was successful. We can also check the new certificate in SCCM console like below:

    1

    1. With the expired certificate, it's normal that software distribution in the software center continue to work.

    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".

    0 comments
  2. Vid3al 91 Reputation points
    2023-10-19T13:48:48.36+00:00

    Okay, I'll try your suggestion.

    In the meantime, let's try to update the boot image drivers as well.

    But when the certificate has expired, as in this case, shouldn't I see something in the "SMSPXE.log" log, of the distribution point, that makes you understand what the problem is?

    In the log "SMSPXE.log" you do not see errors, instead it shows a line "Completed validation of Certificate" that corresponds to the imputed certificate.

    Maybe there are more LOGs to look at ?

    Thank you for your support.