HOTFIX: The System Center Online service cannot find the machine-specific certificate for Asset Intelligence in the ConfigMgr 2007 ALM store

We just released a new ConfigMgr 2007 hotfix addressing the following issue:

The Asset Intelligence synchronization point re-enrolls with the System Center Online service in Microsoft System Center Configuration Manager 2007 every synchronization cycle. This behavior occurs even though the Asset Intelligence synchronization point was previously enrolled successfully. The System Center Online service cannot find the machine-specific certificate for Asset Intelligence in the ALM store even when an apparently valid machine certificate is present. Therefore, an accumulation of machine certificates that are saved in the machine certificate store occurs in the ALM folder.

Additionally, error messages that resemble the following appear in the AIUpdateSvc.log file:

Note These are partial log entries. Other lines that are unrelated to this issue may appear in production log files.

Asset Intelligence Catalog Sync Service Information: 0 : datetime GMT:Sync Now detected
Asset Intelligence Catalog Sync Service Verbose: 0 : datetime GMT:Writing to registry: lastPoll time
Asset Intelligence Catalog Sync Service Information: 0 : datetime GMT:Next scheduled sync time: 02/02/2014 00:00:00
Asset Intelligence Catalog Sync Service Verbose: 0 : datetime GMT:Next scheduled sync is at least another poll interval away.
Asset Intelligence Catalog Sync Service Verbose: 0 : datetime GMT:No retry key found
Asset Intelligence Catalog Sync Service Verbose: 0 : datetime GMT:Reading persisted settings from site server
Asset Intelligence Catalog Sync Service Verbose: 0 : datetime GMT:Reading network settings from registry
Asset Intelligence Catalog Sync Service Verbose: 0 : datetime GMT:Reading proxy server info
Asset Intelligence Catalog Sync Service Information: 0 : datetime GMT:Using proxy: Server=<Your Proxy Server>, Credentials=<Your Credential for Proxy>
Asset Intelligence Catalog Sync Service Information: 0 : datetime GMT:Authentication: Did not find machine certificate in ALM store
Asset Intelligence Catalog Sync Service Information: 0 : datetime GMT:Enrollment Certicate Path is
Asset Intelligence Catalog Sync Service Verbose: 0 : datetime GMT:Created bootstrap cert from byte array
Asset Intelligence Catalog Sync Service Verbose: 0 : datetime GMT:Key container already exist. CryptAcquireContextW(CRYPT_MACHINE_KEYSET|CRYPT_NEWKEYSET) returns -2146893809
Asset Intelligence Catalog Sync Service Verbose: 0 : datetime GMT:Enrollment string: <Enrollment AccountID="e72756d8-8fe6-4bdd-90cb-31470ef06e18"><HardwareID>VjQtRU5VLVNQMi1TQTUAAAAAAAA=</HardwareID><PublicKey>MIGfMA0QAB</PublicKey></Enrollment>
Asset Intelligence Catalog Sync Service Information: 0 : datetime GMT:Redirected to URL https://sc.microsoft.com/CatalogService/service.svc
Asset Intelligence Catalog Sync Service Verbose: 0 : datetime GMT:
…
Asset Intelligence Catalog Sync Service Verbose: 0 : datetime GMT:Writing to registry FileSeqNo 3
Asset Intelligence Catalog Sync Service Information: 0 : datetime GMT:
=====================Data/Status copied to outbox=====================
Asset Intelligence Catalog Sync Service Verbose: 0 : datetime GMT:Machine Cert updated in ALM store

For additional details and a link to a ConfigMgr 2007 hotfix that resolves this issue please see the following:

KB2911369 - The System Center Online service cannot find the machine-specific certificate for Asset Intelligence in the ALM store in Configuration Manager 2007 (http://support.microsoft.com/kb/2911369)

J.C. Hornbeck| Solution Asset PM | Microsoft GBS Management and Security Division

Get the latest System Center news onFacebookandTwitter: