Non-recoverable Failure 0x87d00455: Fixed Download File Winhttp Failed With A

For AAD-joined or workgroup devices, ensure the Root CA certificate that issued your SCCM site's web server certificate is installed on the client.

The Management Point might be configured for HTTPS, but the site's communication settings or the client's installation command-line properties (like /UsePKICert ) are mismatched. Troubleshooting and Resolution Steps 1. Verify and Deploy the Trusted Root CA For AAD-joined or workgroup devices, ensure the Root

Ensure the client has an SSL/TLS channel established before it attempts to download the client files. Summary of Logs to Review Verify and Deploy the Trusted Root CA Ensure

Generate a new token from the SCCM console and include it in your ccmsetup command line using the /Token property. For AAD-joined or workgroup devices

The client is unable to reach the Certificate Revocation List (CRL) to verify the certificate's status, which is a common issue for devices on external networks or behind strict firewalls.