I have recently upgraded approx. 4000 Windows 7 Enterprise laptops from UAG DA 2010 to DA 2012.
Most work OK, but some laptops are failing to connect... and are giving an IP-HTTPS 0x80092013 error, which I am given to understand means that the client cannot reach the CRL list for its computer certificate.
However the CRL list is accessible from the laptop (the URL for the CRL has been added as an NRPT exception) and if there was anything wrong with the published CRL I would expect it to affect all clients.
Also clients should be using Teredo as their preferred protocol with IP-HTTPS as the fallback.
If I run the DA Client Troubleshooting Tool, the IP Connectivity Tests show:
IPHTTPS interface is not operational - last error code 0x80092013
Teredo is used as IPv6 transition technology
Successfully connected to endpoint
No response received from <domain_name>
Then both the user and Infrastructure tunnel tests fail.
I have 2 laptops, which as far as I can see are identical in DA config, connected to the same ADSL line, one works the other doesn't.
Anyone have any ideas what is going on here... or have any advice as to what I could try?
I have tried disabling the IP-HTTPS interface to force it to use Teredo... and disabling the Teredo interface to force IP-HTTPS. Have tried reapplying GPOs etc.