From 986ac38cc318d7f58f5d49613d21e7a357c0d5f4 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 16 Oct 2019 13:47:51 -0700 Subject: [PATCH] added info into known issues --- .../deployment/windows-autopilot/known-issues.md | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/windows/deployment/windows-autopilot/known-issues.md b/windows/deployment/windows-autopilot/known-issues.md index b2de8f53ee..52826b1c93 100644 --- a/windows/deployment/windows-autopilot/known-issues.md +++ b/windows/deployment/windows-autopilot/known-issues.md @@ -31,10 +31,8 @@ This happens because Windows 10, version 1903 deletes the AutopilotConfiguration To fix this issue:
  1. Edit the Configuration Manager task sequence and disable the Prepare Windows for Capture step.
  2. Add a new Run command line step that runs c:\windows\system32\sysprep\sysprep.exe /oobe /reboot.
More information -The following known issue will be resolved by installing the KB4517211 update, due to be released in late September 2019. -
 
-TPM attestation fails on Windows 10 1903 due to missing AKI extension in EK certificate. (An additional validation added in Windows 10 1903 to check that the TPM EK certs had the proper attributes according to the TCG specifications uncovered that a number of them don’t, so that validation will be removed). -Download and install the KB4517211 update.

This update is currently pending release. +TPM attestation fails on Windows 10 1903 due to missing AKI extension in EK certificate. (An additional validation added in Windows 10 1903 to check that the TPM EK certs had the proper attributes according to the TCG specifications uncovered that a number of them don’t, so that validation will be removed). +Download and install the [KB4517211 update](https://support.microsoft.com/help/4517211/windows-10-update-kb4517211). The following known issues are resolved by installing the August 30, 2019 KB4512941 update (OS Build 18362.329): - Windows Autopilot for existing devices feature does not properly suppress “Activities” page during OOBE. (Because of this, you’ll see that extra page during OOBE). @@ -53,7 +51,12 @@ TPM attestation fails on Windows 10 1903 due to missing AKI extension in EK cert - You are unable to install UWP apps from the Microsoft Store, causing failures during Windows Autopilot. If you are deploying Company Portal as a blocking app during Windows Autopilot ESP, you’ve probably seen this error. - A user is not granted administrator rights in the Windows Autopilot user-driven Hybrid Azure AD join scenario. This is another non-English OS issue. Download and install the KB4505903 update.

See the section: How to get this update for information on specific release channels you can use to obtain the update. - +Windows Autopilot self-deploying mode fails with an error code: + +
0x800705B4The device is not TPM 2.0 capable, such as a VM. You cannot use this device with self-deploying mode. +
0x801c03eaThe device is TPM 2.0 capable, but the TPM is not currently 2.0 and needs to be upgraded. +
0xc1036501The device cannot do an automatic MDM enrollment because there are multiple MDM configurations in Azure AD. Remove the duplicate configurations. +
White glove gives a red screen and the Microsoft-Windows-User Device Registration/Admin event log displays HResult error code 0x801C03F3This can happen if Azure AD can’t find an AAD device object for the device that you are trying to deploy. This will occur if you manually delete the object. To fix it, remove the device from AAD, Intune, and Autopilot, then re-register it with Autopilot, which will recreate the AAD device object.

To obtain troubleshooting logs use: Mdmdiagnosticstool.exe -area Autopilot;TPM -cab c:\autopilot.cab White glove gives a red screenWhite glove is not supported on a VM.