Records details about the Windows Update Agent on the client when it searches for software updates. bgbisapi.msi will log to D:\Program Files\Microsoft Configuration Manager\logs\bgbisapiMSI.log The following table lists the log files that are on the Configuration Manager site server and site system servers. Reviewing the logs on the client machines, the CCM Notification logCCMNotificationAgent.log showed: Server Certificate Retrieved in TLS is Not an Exact Match of the Current MP Encryption Certificate0x80004005. Records output from the site database backup process when SQL Server is installed on a server that isn't the site server. Records the writing of all status messages to the database. Records details about the replication of software updates notification files from a parent site to child sites. Computer that runs the Configuration Manager console, Installation of the SMS Provider administration service REST API. It's similar to use of WuaHandler when it calls the Windows Update Agent API to download and install Windows updates. For example, see CcmExec.log and SleepAgent_@SYSTEM_0.log in the Client operations section of this article. The following table lists the log files that contain information related to extensions. We have WSUS configured to download and schedule the install (4), with at least 24 hours between patch release and the first group of servers' schedule to update (giving WSUS plenty . Some times it even don start any client jobs at all and i cant find any logging telling why it wont start any . It generates push messages for clients and sends notifications to the BGB server (MP), and stores the results. Records details about the current and intended state of applications, their applicability, whether requirements were met, deployment types, and dependencies. List the total number of online clients count with Notification Server (Management Point). Thanks! Compliance settings and company resource access. After upgrading a Configuration Manager Current Branch environment to 1706 you may notice a lot of Expecting more data from client errors in the BgbServer.log . Passed OS version check. Client state system inbox backlog: Checks the backlog for the inbox auth\statesys.box\incoming. Records information about the progress of launching the secondary site installation process. Records details of service connection point installation. Records activities of the enrollment website process. BGBSERVER.LOG. Log file for synchronization of third-party software updates. Troubleshoot SCCM Fast Channel Push Notification Issues Configuration Manager ConfigMgr? Records messages generated by the installation of a data warehouse service point. We are working every day to make sure our community is one of the best. To configure the logging level, use the setting. Records information about message forwarding. Verbose logging shows additional information about the interaction with the client user interface. The download link,, Yesterday Microsoft has released Version 5.00.2053.0000 of the Configuration Manager SDK. The Content Access service. These log files are synced, so you don't need to RDP to the cloud management gateway to obtain them, and that option isn't supported. Records details about the software update point configuration and connections to the WSUS server for subscribed update categories, classifications, and languages. For more information, see Offboard from tenant attach. Tried steps from prajals blog to modify .net config file but no luck: Please refer below logs. For more information about how to enable NDES logging, see the Enable Logging section of the NDES wiki. The following table lists the log files located on the Configuration Manager client. The certificate bindings on the MP server are verified on 443 as per IIS configuration. Maintains the local package cache on the client. The following table lists the log files that contain information related to the Configuration Manager console. Records the status of client diagnostic actions. DeleteBgbServerApplication: failed to get all applications with the error 0x80070422. Records activities related to client registration, such as validating certificates, CRL, and tokens. Records details about the distribution point health monitoring scheduled task that is configured on a distribution point. Records details about setting up connections between the cloud management gateway service and the cloud management gateway connection point. Well explained Sir. Records the processing of metering files and settings. Configuration Manager Policy Module and the Network Device Enrollment Service. Log file for synchronization of collection membership results to Azure Active Directory. Records the files that are moved from the management point to the corresponding INBOXES folder on the site server. bgbisapi.msi exited with return code: 0 Once the message is sent to the SMS_NOTIFICATION_SERVER, a task is sent from the management point to the corresponding client. SCCM CB Notification Server/Manager. You can also detect this issue from entries in the GenericUploadWorker.log and CMGatewayNotificationWorker.log files. Records details about the conversion of XML.svf status message files from clients and the copy of those files to the site server. ERROR: Expecting more data from client [::ffff:192.168.3.203]:49247 It also records information about online and task status files generation to be sent to the site server. Records installation information when clients receive the client setting option to turn on wake-up proxy. Specifically communication with the Network Device Enrollment Service (NDES) for certificate requests using the Simple Certificate Enrollment Protocol (SCEP). In Configuration Manager versions 1810 and earlier, your site server handles the communication to the client. Records details about distribution point health monitoring scheduled tasks that are configured on a distribution point. Records activities of the enrollment service process. Primary log file for most errors that occur during the Windows installation process. Do you have your SCCM in http or https, if its work in https you could see in the IIS console the bindings and certificates. CcmNotificationAgent.log is the log file on the SCCM client device. Wait at least two hours for the service to clean up the existing record. Records the availability and disk space monitoring process of all site systems. Records activities related to communication between the client and management points. Records information for Migration actions that involve migration jobs, shared distribution points, and distribution point upgrades. If your client doesn't show "online", it may be caused by it not working properly. Records client communication from mobile device legacy clients with a management point that is enabled for mobile devices. Records information for Background Intelligent Transfer Service (BITS) jobs on the device. Records the activities of the notification agent, such as client-server communication and information about tasks received and dispatched to other client agents. Records the activity for general maintenance tasks for the client. The following table lists the log files that contain information related to deploying packages and programs. For more detail, see statesys.log. 3. Records the process of remediation and compliance for all providers located in \Program Files\Microsoft Policy Platform, except the file provider. Records details about downloads from Microsoft, such as site updates. Records the activities of the power management provider (PWRInvProvider) hosted in the WMI service. Also records activities related to hardware inventory. Records details about the processing of XML files from the inbox for updating the Asset Intelligence catalog. Records client communication with NDES for certificate requests using the Simple Certificate Enrollment Protocol (SCEP). Records information about the download of extensions from Microsoft, and the installation and uninstallation of all extensions. The following logs contain information related to the Exchange Server connector. The following table lists logs that contain information related to mobile device enrollment. The following table lists the log files that contain information related to using Wake On LAN. AnoopisMicrosoft MVP! Records information about the installation of the System Center Endpoint Protection client and the application of antimalware policy to that client. Records information for the component that sends state messages from the client to the site. In a multi-primary site hierarchy, use the log file that is created at the central administration site. Records the activities of the notification HTTP proxy as it relays the messages of clients using HTTP to and from the notification server. Records the activities of the notification server, such as client-server communication and pushing tasks to clients. Records detection and enforcement information for application groups. Records information about configuration item task scheduling. Records details about Windows Sysprep and setup logs. Records details about the syncing of malware threat information from the Endpoint Protection role server with the Configuration Manager database. When your client is NOT showing as ONLINE in the SCCM console, then we may have a problem with the fast notification communication channel. Records client transfer data for mobile device legacy clients and for ActiveSync deployments. Records details about the extraction of compressed files received from a primary site. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. Impacted devices: Records details about the management point installation. Subsequent sync cycles are delta synchronizations. Records the installation activities of the enrollment website. I would suggest you check the boundaries once again and also under hierarchy settings, what is the client approval method set to ?. Records communication between mobile devices and the enrollment proxy point. I checked the CcmNotificationAgent.log on the client and it seems the client is working as the log states Successfully sent keep-alive message. Records ccmsetup.exe tasks for client setup, client upgrade, and client removal. Records detailed output from the site server setup. Failed to authenticate with client [::ffff:10.55.52.119]:65118. CTool::RegisterComPlusService: Failed to unregister D:\Program Files\Microsoft Configuration Manager\bin\x64\BGBServer\microsoft.configurationmanager.bgbserverchannel.dll with .Net Fx 4.0 The problem is ONLY with FAST notification channel communication, and normal deployments + policies are working fine. Records details about the User State Migration Tool (USMT) and capturing user state data. After the Firewall ports changed, the client notification agent started working fine. This communication channel used for SCCM client fast notification is via TCP (port 10123) or HTTP (port 80). This log records the activities of the notification server such as client-server communications and pushing tasks to clients. More details are available in the video tutorial here. Records the processing of policy and assignment. CTool::RegisterComPlusService: run command line: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe /u D:\Program Files\Microsoft Configuration Manager\bin\x64\BGBServer\microsoft.configurationmanager.bgbserverchannel.dll Records the HTML response from the certificate server when the mobile device legacy client enroller program requests a PKI certificate. SCCM client communicates to its MP every 15 minutes to confirm its still online. Records the interaction of the Asset Intelligence sync point with the cloud service. Firewall Rules all ok and was working well before the update. The following table lists the log files that contain information related to content management. Records the installation of the Configuration Manager console. Records details about content provisioning, collecting storage and bandwidth statistics, and administrator-initiated actions to stop or start the cloud service that runs a content-enabled cloud management gateway (CMG). Expect this to be fixed in the next CB release. But for completeness: all environments I have seen this occurring so far were HTTP. exe) with TCP port 10123 is NOT allowed by Windows Firewall on all interfaces I. StateMessageProvider.log: Records information for the component that sends state messages from the client to the site. Records actions for the SMS Provider administration service REST API. Records the activities and the status of the Exchange Server connector. So I looked at the bgmgr.log file on the site and we are seeing this: --Begin to process file C:\Program Files\Microsoft Configuration Manager\inboxes\bgb.box\cbo4hxcv.BOS SMS_NOTIFICATION_MANAGER 10/3/2017 4:28:10 PM 43056 (0xA830) --ERROR: Failed to parse online status file SMS_NOTIFICATION_MANAGER 10/3/2017 4:28:10 PM 43056 (0xA830) --ERROR: Failed to execute task class OnlineStatusParser SMS_NOTIFICATION_MANAGER 10/3/2017 4:28:10 PM 43056 (0xA830) --ERROR: Failed to parse file SMS_NOTIFICATION_MANAGER 10/3/2017 4:28:10 PM 43056 (0xA830) --ERROR: Failed to execute task class OnlineStatusProcessTask SMS_NOTIFICATION_MANAGER 10/3/2017 4:28:10 PM 43056 (0xA830) --WARNING: Failed to process file cbo4hxcv.BOS, move it to bad inbox SMS_NOTIFICATION_MANAGER 10/3/2017 4:28:10 PM 43056 (0xA830). and. Records the Windows Installer data for the configuration of an enrollment point. Records the state migration point performance counter updates. Log file for component that synchronizes apps from the Microsoft Store for Business. Recently I bumped into an interesting issue with status messages on a Configuration Manager 2012 SP1 site. Records details about task sequences when they're imported, exported, or edited. Records activities for authentication tokens, either from Azure Active Directory or site-issued client tokens. Records information about data synchronization between the site database and the data warehouse database. SCCM fast channel notification was mainly used to notify clients about vital policies, collect inventories, etc. Records all BITS communication for policy or package access. Records detail related to uploading database changes to Microsoft. Records details about packages and task sequences that run. The following table lists the log files that contain information related to the Windows Update Agent. The following table lists the log files that contain information related to the fallback status point. Clients send a ping to their management point every 5 minutes. Records signing and authentication activity. This location might be different if you specified a non-default installation directory or . He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc. Records details of offline servicing schedules and update apply actions on operating system Windows Imaging Format (WIM) files. This file is located in the folder for the NDES account profile, for example, in C:\Users\SCEPSvc. Records details about configuration item definition downloads. You can see the BOS file getting created in the video tutorial here. The notification server will be located along with Management Point (MP) and secondary sites. Following are some of the important log file snippets. Records the activity in Software Center for the specified user on the client computer. Records activities for the client SDK interfaces. It can also include other activities from the distribution manager component. Records the status of component threads monitored for the site server. Records user requests from Software Center, retrieving/installing user-available applications from the server. Records the execution of endpoint analytics policy and upload of client data to the site server. Records the actions of the management point component that moves client files to the corresponding INBOXES folder on the site server. It may not display this or other websites correctly. Records activities related to Software Center prerequisite component validation. The Firewall port10123 port was not opened between the SCCM client and the primary BGB server. Records details about device drivers that have been imported into the driver catalog. Records information about the state of the Configuration Manager VSS writer that is used by the backup process. Provides information about the installation of the Endpoint Protection site system role. The fast channel notification agent in the SCCM client establishes a persistent connection with its notification server. The following sections provide details about the different log files available to you. Monitors the status of the Endpoint Protection site system role. Records output from the site backup process. When downloading updates manually, this log file is located in the %temp% directory of the user running the console on the machine you're running the console. Records the queue and activities for notifications to external systems like Azure Logic Apps. Finished sending push task (PushID: 1 TaskID: 3) to 1 client andGenerated BGB online status DELTA report are two important lines of SCCM CB fast notification channel server log BGBServer.log. Records information about uninstalling wake-up proxy when clients receive the client setting option to turn off wake-up proxy, if wake-up proxy was previously turned on. ERROR: Don't have SQL connection when get client certificate for client Now everything is configured over http, but apparently somewhere there is a connection over https. Records activities of the discovery data manager. These clients showing offline seems to prevent us from being able to run a script against a device from sccm. Records hardware inventory retry processes. Records details about the installation of the Asset Intelligence sync point site system role. Installing Pre Reqs for SMSBGB Records client transfer file installation for configuring mobile device legacy client transfer files. Records details about which clients need to be sent wake-up packets, the number of wake-up packets sent, and the number of wake-up packets retried. Sleep 69 seconds to restart client BgbAgent 01/08/2017 16:42:34 8156 (0x1FDC). Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support. We have recently upgrade to 2010 & then after this issue occurs, SMSBGB Setup Started. JavaScript is disabled. Records actions for starting applications on the client marked. Hi for windows firewall is the port 10123 to be opened on the management point or the client? Records information about setup and recovery tasks when Configuration Manager recovers a site from backup. Records details about multicast performance counter updates. These are local Configuration Manager log files that cloud service manager syncs from Azure storage every five minutes. Records errors, warnings, and information about running Resource Explorer. The following table lists the log files that contain information related to the software update point. The following table lists the log files that contain information related to the service connection point. Records details about the process of downloading software updates from the update source to the download destination on the site server. Installing the SMSBGB When reviewing the Devices under Assets and Compliance, many clients were showing offline even though the were actually online and responded to ping from the server. The following table lists the log files that contain information related to the installation of the Configuration Manager client. In the BGBSERVER.log I am seeing errors like this sometimes: --ERROR: Expecting more data from client [::ffff:10.10.160.137]:64623 Any help would be appreciated because I have no clue where to go from here. Creates and maintains the client GUID and identifies tasks during client registration and assignment. Records activities of the client and the SMS Agent Host service. When the software update point installation completes. For more information, see the Authentication section in the SMS provider article. ERROR: Client certificate error: RemoteCertificateChainErrors SMS_NOTIFICATION_SERVER 12/10/2016 6:13:46 AM 16376 (0x3FF8) . Configuration Manager 2012 - General https: . Records activity for sending client schedules. Records details when distribution points are found for referenced content. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register. Maintains certificates for Active Directory Domain Services and management points. The following table lists the log files that contain information related to power management. I dont know whether this notification channel was codenamed as Big Green Button or not . It's possible that specific devices, which are Configuration Manager clients, won't be uploaded to the service. After migrating to a new management point, many clients were not checking into the management point. Records the availability of the management point every 10 minutes. The actual file names include the service name and role instance identifier. The BgbServer.log file may . Records processing for Microsoft Store for Business apps. Records the registration of the management point. All rights reserved. Records details about the activity of the remote control viewer. Records details about deployments on the client, including software update activation, evaluation, and enforcement. Records details about the installation of the Endpoint Protection client and the application of antimalware policy to that client. BGBmgr.log is the log file that will give more details about the notification manager. Certificate enrollment uses the certificate registration point and the Configuration Manager Policy Module on the server that's running the Network Device Enrollment Service (NDES). Details of the actual setup process are contained in ConfigMgrSetup.log. But, I thought it should work with port 80 HTTP channel. The following table lists the log files that contain information related to discovery. Records the client activity for locating management points, software update points, and distribution points. Records details about the Inventory Tool for the Microsoft Updates sync process. Records details about the software updates sync process. Records the conversion of XML.ddr records from clients, and then copies them to the site server. Use the following logs located on the service connection point: Use the following logs located on the management point: Use the following logs located on the client: When an action is initiated from the Microsoft Intune admin center, CMGatewayNotificationWorker.log processes the request. Installing D:\Program Files\Microsoft Configuration Manager\bin\x64\bgbisapi.msi REINSTALL=ALL REINSTALLMODE=vmaus CCMINSTALLDIR=D:\Program Files\SMS_CCM CCMSERVERDATAROOT=D:\Program Files\Microsoft Configuration Manager USESMSPORTS=TRUE SMSPORTS=80 USESMSSSLPORTS=TRUE SMSSSLPORTS=443 USESMSSSL=TRUE SMSSSLSTATE=63 CCMENABLELOGGING=TRUE CCMLOGLEVEL=1 CCMLOGMAXSIZE=1000000 CCMLOGMAXHISTORY=1 Records details about enforcement actions (install and uninstall) taken for applications on the client. Our community has been around for many years and pride ourselves on offering unbiased, critical discussion among people of all different backgrounds. The Domain does have PKI certs, but we are using Self-signed.</p> <p>The BGBServer.log keeps repeating the following errors and the client side does not appear to have any corresponding certificate errors occurring at this time either.</p> <p>BGBSERVER.LOG</p> <p>ERROR: Expecting more data from client [::ffff:12.50.70.244]:60653SMS . Computer that is configured as a pull-distribution point. The Configuration Manager client for Mac computers records information in the following log files on the Mac computer: The log file SMS_DM.log on the site system server also records communication between Mac computers and the management point that is set up for mobile devices and Mac computers. Logging improvements in future releases should fix this and avoid BgbServer.log from turning red. Records details about the results of state migration point health checks and configuration changes. Records certificate and proxy account information. Can be used to troubleshoot client installation or removal problems. Records information about the processing of MIF files and hardware inventory in the Configuration Manager database. Records incoming site-to-site communication transfers. Top-level site in the Configuration Manager hierarchy, Service health state for the SMS Provider administration service REST API, including certificate information. However, the software updates log file, Updateshandler.log, provides more informative details about installing the software updates that are required for compliance. The following table lists the log files that contain information related to Windows servicing. Records details about site server activities related to client notification tasks and processing online and task status files. For more general information about log files in Configuration Manager, see About log files. Records details about when the Windows Update Agent connects to the WSUS server and retrieves the software updates for compliance assessment, and whether there are updates to the agent components. Records details about Windows Sysprep and setup logs.