Sign in with Microsoft
Sign in or create an account.
Hello,
Select a different account.
You have multiple accounts
Choose the account you want to sign in with.

Symptoms

A client update is available to resolve the following issues with the Configuration Manager client setup program (ccmsetup.exe). 

1. When a cloud management gateway (CMG) is configured to use a cloud distribution point, ccmsetup.exe is unable to download the client installation file (ccmsetup.cab) from Azure blob storage. This leads to increased CMG traffic. It also delays installation or upgrade of the client because it will fall back to use another management point if available. Errors resembling the following are recorded in the ccmsetup.log on the client.

[CCMHTTP] ERROR: URL=https://{Azure_blob_storage}:443/content-l0000003/ccmsetup.cab?..., Port=443, Options=224, Code=0, Text=CCM_E_BAD_HTTP_STATUS_CODE
[CCMHTTP] ERROR INFO: StatusCode=400 StatusText=Authentication information is not given in the correct format. Check the value of Authorization header.

2. Internet-facing clients that only use PKI client certificates for authentication are unable to install or upgrade after installation of the following update rollup.

KB 4578605 Update Rollup for Microsoft Endpoint Configuration Manager version 2006

This occurs if the option Use PKI client certificate (client authentication capability) when available is disabled on the Communication Security tab of Site Properties. Errors resembling the following are recorded in the ccmsetup.log file on the client.

Client is not allowed to use PKI issued certificate or not able to use AAD token or ContentToken thus can not talk in HTTPS. 
Failed to download client files by BITS. Error 0x8000ffff 

Update information for Microsoft Endpoint Configuration Manager, version 2006

Update installation notes

  • This update supersedes the following previously released client update.

    KB 4575787 Co-management enrollment takes longer than expected for Configuration Manager clients

  • If clients have not yet upgraded to version 5.00.9012.1052 from KB 4578605, it is recommended first to disable automatic client upgrade on the Client Upgrade tab of Hierarchy Settings. This removes the need to upgrade clients twice in a row: once from the update rollup and once from this standalone update. The client.msp file shipping in this update contains all of the prior changes that shipped with both update rollup KB 4578605 and update KB4575787.

This update is available in the Updates and Servicing node of the Configuration Manager console for environments that were installed by using early update ring or globally available builds of version 2006, and have the following update rollup installed.

KB 4578605 Update Rollup for Microsoft Endpoint Configuration Manager version 2006

Restart information

This update does not require a computer restart but will initiate a site reset after installation.

Update replacement information

The client patch (.MSP file) contained in this update supercedes the versions that shipped with update rollup KB 4578605 and update KB 4575787. Therefore, only one client upgrade is required.

Additional installation information

After you install this update on a primary site, pre-existing secondary sites must be manually updated. To update a secondary site in the Configuration Manager console, click Administration, click Site Configuration, click Sites, click Recover Secondary Site, and then select the secondary site. The primary site then reinstalls that secondary site by using the updated files. Configurations and settings for the secondary site are not affected by this reinstallation. The new, upgraded, and reinstalled secondary sites under that primary site automatically receive this update.

Run the following SQL Server command on the site database to check whether the update version of a secondary site matches that of its parent primary site:

select dbo.fnGetSecondarySiteCMUpdateStatus ('SiteCode_of_secondary_site')

If the value 1 is returned, the site is up to date, with all the hotfixes applied on its parent primary site.

If the value 0 is returned, the site has not installed all the fixes that are applied to the primary site, and you should use the Recover Secondary Site option to update the secondary site.

File name

File version

File size

Date

Time

Platform

avhandler.dll

5.00.9012.1056

169848

02-Oct-2020

00:00

x64

avhandler.dll

5.00.9012.1056

141688

02-Oct-2020

00:00

x86

ccmsetup.exe

5.00.9012.1055

4328816

02-Oct-2020

00:00

x86

ccmsetup.msi

Not Applicable

6795264

02-Oct-2020

00:00

Not Applicable

ccmsetup-sup.cab

Not Applicable

1139603

02-Oct-2020

00:00

Not Applicable

cm2006-client-kb4575790-i386.msp

Not Applicable

14295040

02-Oct-2020

00:00

Not Applicable

cm2006-client-kb4575790-x64.msp

Not Applicable

17129472

02-Oct-2020

00:00

Not Applicable

comanagementhandler.dll

5.00.9012.1056

270712

02-Oct-2020

00:00

x64

comanagementhandler.dll

5.00.9012.1056

213880

02-Oct-2020

00:00

x86

 

References

Updates and servicing for Configuration Manager

Data flow for cloud management gateway

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Was this information helpful?

What affected your experience?
By pressing submit, your feedback will be used to improve Microsoft products and services. Your IT admin will be able to collect this data. Privacy Statement.

Thank you for your feedback!

×