Clean install of CMS 7.5 in my VM test environment- did not select require SSL during the install.
Manually configured IIS to require SSL after the install.
Configure a Site Server - install all components - create preboot images successfully. All Bootwiz, Ghost and PCT files properly in place.
Check the "respond to" option for managed computer.
RESULT: managed computer cannot PXE boot.
FROM the SbsLog_Pxe.txt
Fri Nov 22 08:22:29 2013 3448 SbsPxeInterface.cpp Sbs::SbsPxeInterface::OperationDone 69 Debug Function called
Fri Nov 22 08:22:29 2013 3448 SbsPxeInterface.cpp Sbs::SbsPxeInterface::ListenDone 117 Debug Function called
Fri Nov 22 08:22:29 2013 3448 SbsPxeInterface.cpp Sbs::SbsPxeInterface::StartListen 54 Debug Function called
Fri Nov 22 08:22:29 2013 3448 SbsPxeInterface.cpp Sbs::SbsPxeInterface::SendPxeResponse 392 Debug Function called
Fri Nov 22 08:22:29 2013 4092 SbsPxeInterface.cpp Sbs::SbsPxeInterface::OperationDone 69 Debug Function called
Fri Nov 22 08:22:29 2013 4092 SbsPxeInterface.cpp Sbs::SbsPxeInterface::SendDone 652 Debug Function called
Fri Nov 22 08:22:31 2013 4092 SbsPxeInterface.cpp Sbs::SbsPxeInterface::OperationDone 69 Debug Function called
Fri Nov 22 08:22:31 2013 4092 SbsPxeInterface.cpp Sbs::SbsPxeInterface::ListenDone 117 Debug Function called
Fri Nov 22 08:22:31 2013 4092 SbsPxeInterface.cpp Sbs::SbsPxeInterface::StartListen 54 Debug Function called
Fri Nov 22 08:22:31 2013 4092 SbsDhcp.cpp Sbs::DhcpRequest::Parse 166 Debug Not a valid IP address - Packet was filtered out.
Fri Nov 22 08:22:31 2013 4092 SbsPxeInterface.cpp Sbs::SbsPxeInterface::ListenDone 137 Debug Failed to parse DHCP Packet
Fri Nov 22 08:22:31 2013 4092 SbsPxeInterface.cpp Sbs::SbsPxeInterface::OperationDone 69 Debug Function called
Fri Nov 22 08:22:31 2013 4092 SbsPxeInterface.cpp Sbs::SbsPxeInterface::ListenDone 117 Debug Function called
Fri Nov 22 08:22:31 2013 4092 SbsPxeInterface.cpp Sbs::SbsPxeInterface::StartListen 54 Debug Function called
Fri Nov 22 08:22:31 2013 4092 SbsPxeInterface.cpp Sbs::SbsPxeInterface::ListenDone 168 Debug Req: IP=10.100.1.20, MAC=00-0C-29-21-3F-41, UUID=4FA24D56-7FC3-9748-7E44-52CA39213F41, SerNum=VMware-56 4d a2 4f c3 7f 48 97-7e 44 52 ca 39 21 3f 41
Fri Nov 22 08:22:31 2013 4092 SbsHttpClient.cpp Sbs::SbsHttpClient::SendRequest 36 Debug Function called
Fri Nov 22 08:22:31 2013 4092 SbsHttpClient.cpp Sbs::SbsHttpClient::OperationDone 85 Debug Function called
Fri Nov 22 08:22:31 2013 4092 SbsHttpClient.cpp Sbs::SbsHttpClient::OperationDone 85 Debug Function called
Fri Nov 22 08:22:31 2013 4092 SbsHttpClient.cpp Sbs::SbsHttpClient::OperationDone 117 Error NS response parse failure, bytes read 512, 'HTTP/1.1 403 Forbidden
Content-Type: text/html
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
X-Frame-Options: SAMEORIGIN
Date: Fri, 22 Nov 2013 13:22:32 GMT
Content-Length: 1233
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>403 - Forbidden: Access is denied.</title>
<style type="text/css">
--------------------------------------------------------------------------------------------------------------------------
FROM the SbsConfiguration.xml file
All my NBS General Settings are in here but check out the "clienthandler" line.
<sbsconfiguration>
<network>
<interfaces all="yes"/>
</network>
<images rootdir="C:\Program Files\Altiris\Altiris Agent\Agents\Deployment\SBS\Images"/>
<pxe>
<logging filename="SbsLog_Pxe.txt" enabled="yes" level="255" backup="yes"/>
<parameters enabled="yes" dhcpdiscoverytype="0"/>
<filters>
<filter parameter="mac" enabled="no" type="exclude" value=""/>
</filters>
<clients>
<client type="managed" enabled="yes" image="winPEx64" arch="" timeout="5" prompt="Press[F8] to select a boot option."/>
<client type="predefined" enabled="yes" image="winPEx64" arch="" timeout="5" prompt="Press[F8] to select a boot option."/>
<client type="unknown" enabled="yes" image="winPEx64" arch="" timeout="255" prompt=""/>
</clients>
<clienthandler type="network" protocol="http" servername="CMS75-NS.jeepjazz.local" port="80" validatecertificate="no"/>
</pxe>
<tftp>
<logging filename="SbsLog_Tftp.txt" enabled="yes" level="255" backup="yes"/>
<parameters enabled="yes" mtu="1456" maxtransfers="0" tftpport="69"/>
</tftp>
<netboot>
<parameters enabled="no" nfsdir="C:\Program Files\Altiris\Altiris Agent\Agents\Deployment\SBS\MacNetShare" nfsshare="MacNetShare"/>
<clients>
<client type="managed" enabled="no" image=""/>
<client type="predefined" enabled="no" image=""/>
<client type="unknown" enabled="no" image=""/>
</clients>
</netboot>
</sbsconfiguration>
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
When I uncheck the require SSL option in IIS, the client immediately gets the PXE boot menu.
I thought we had to require SSL on the SMP to utilize CEM?
For CEM I knew the Site Server needs a cert installed, but is it also necessary for the PXE Server operation as well?
Perhaps, it was installing initially without specifying "require SSL"?