Issue

After enabling FIPS on the core server, Provisioning templates stop working.

If you select a Provisioning template to execute, it will attempt to run but will fail with error 80001803H

Cause

This issue occurs after enabling FIPS 140-2 on a core server. When FIPS 140-2 is enabled, a new SHA1 cert is generated on the core and replaces the old MD5 core cert.

The WINPE image does not get updated automatically with the new cert and thus communication from a client being imaged is refused by the core server.

Resolution

On the core server, do the following steps:

1. Navigate to \Program Files (x86)\LANDESK\ManagementSuite
2. Run "OSD.UPGRADE.EXE"

This will update BOOT.WIM, BOOTMEDIA.WIM, and BOOT_X64.WIM and inject the newer SHA-1 certificates into the Boot Images.