|
| 1 | +--- |
| 2 | +title: CMG Maintenance Task fails to update Public IP Resource after installing the Update Rollup for Microsoft Configuration Manager version 2503 (KB32851084) |
| 3 | +description: CMG Maintenance Task fails to update Public IP Resource after installing the Update Rollup for Microsoft Configuration Manager version 2503 (KB32851084). |
| 4 | +ms.date: 10/11/2025 |
| 5 | +ms.reviewer: kaushika, payur |
| 6 | +author: Cloud-Writer |
| 7 | +ms.author: dmarin |
| 8 | +ms.custom: sap:Cloud Services\Cloud Management Gateway (CMG) |
| 9 | +--- |
| 10 | +# CMG Maintenance Task fails to update Public IP Resource after installing the Update Rollup for Microsoft Configuration Manager version 2503 (KB32851084) |
| 11 | + |
| 12 | +*Applies to*: Configuration Manager (current branch) |
| 13 | + |
| 14 | +## Symptoms |
| 15 | + |
| 16 | +After installing the [Update Rollup for Microsoft Configuration Manager version 2503 (KB32851084)](https://learn.microsoft.com/intune/configmgr/hotfix/2503/32851084), CloudMgr.log on the Service Connection Point may display the error message resembling the following: |
| 17 | + |
| 18 | +```output |
| 19 | +Resource Manager - Creating Public IP Address <Name of CMG> with deployment CreatePublicIPAddressXXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX~~ |
| 20 | +ERROR: Exception occured for service <Name of CMG> : System.AggregateException: One or more errors occurred. |
| 21 | +---> Azure.RequestFailedException: At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-deployment-operations for usage details.~~Status: 200 (OK)~~ErrorCode: DeploymentFailed~~~~Service request succeeded. Response content and headers are not included to avoid logging sensitive data.~~~~ |
| 22 | +at Azure.Core.OperationInternal`1.GetResponseFromState(OperationState`1 state)~~ |
| 23 | +at Azure.Core.OperationInternal`1.<UpdateStatusAsync>d__20.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~ |
| 24 | +at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ |
| 25 | +at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~ |
| 26 | +at Azure.Core.OperationInternalBase.<UpdateStatusAsync>d__13.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~ |
| 27 | +at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ |
| 28 | +at Azure.Core.OperationPoller.<WaitForCompletionAsync>d__11.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~ |
| 29 | +at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ |
| 30 | +at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~ |
| 31 | +at Azure.Core.OperationInternalBase.<WaitForCompletionResponseAsync>d__19.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~ |
| 32 | +at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ |
| 33 | +at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~ |
| 34 | +at Azure.Core.OperationInternal`1.<WaitForCompletionAsync>d__19.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~ |
| 35 | +at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ |
| 36 | +at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~ |
| 37 | +at System.Threading.Tasks.ValueTask`1.get_Result()~~ |
| 38 | +at Azure.Core.OperationInternal`1.<WaitForCompletionAsync>d__15.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~ |
| 39 | +at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ |
| 40 | +at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~ |
| 41 | +at Azure.ResourceManager.Resources.ArmDeploymentCollection.<CreateOrUpdateAsync>d__4.MoveNext()~~ |
| 42 | +--- End of inner exception stack trace ---~~ |
| 43 | +at System.Threading.Tasks.Task`1.GetResultCore(Boolean waitCompletionNotification)~~ |
| 44 | +at Microsoft.ConfigurationManager.AzureManagement.ResourceManager.StartAndMonitorDeployment(String resourceGroupName, String deploymentName, ArmDeploymentContent deploymentContent, Int32 secondsToWait, Int32 timeoutInMinutes)~~ |
| 45 | +at Microsoft.ConfigurationManager.AzureManagement.Resou... |
| 46 | +
|
| 47 | +TaskManager: Task [Deployment Maintenance for service <Name of CMG>] status is Faulted~~ |
| 48 | +
|
| 49 | +ERROR: TaskManager: Task [Deployment Maintenance for service <Name of CMG>] has failed. Exception Azure.RequestFailedException, At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-deployment-operations for usage details.~~Status: 200 (OK)~~ErrorCode: DeploymentFailed~~~~Service request succeeded. Response content and headers are not included to avoid logging sensitive data.~~.~~ |
| 50 | +
|
| 51 | +TaskManager: Scheduling task [Deployment Maintenance for service <Name of CMG> for retry.~~ |
| 52 | +``` |
| 53 | + |
| 54 | +In the Azure portal, the Activity log of the Resource Group that contains the resources of the CMG displays the error message resembling the following: |
| 55 | + |
| 56 | +```output |
| 57 | +Operation Name: Create or Update Public Ip Address |
| 58 | +
|
| 59 | +Summary - Message; Resource /subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/<Name of CMG Resource Group>/providers/Microsoft.Network/publicIPAddresses/<Name of Public IP Address> has an existing availability zone constraint 1, 2, 3 and the request has availability zone constraint NoZone, which do not match. Zones cannot be added/updated/removed once the resource is created. The resource cannot be updated from regional to zonal or vice-versa. |
| 60 | +``` |
| 61 | + |
| 62 | +The Cloud Management Gateway (CMG) state in the Configuration Manager console may then appear in "Error" status with the detailed information "Failed to perform maintenance" in "Status Description" and flipping back to "Ready" shortly afterwards. |
| 63 | + |
| 64 | +The error messages are likely to repeat every 20 mins aligning with the Deployment Maintenance Task retries. |
| 65 | + |
| 66 | +## Cause |
| 67 | + |
| 68 | +Once the Update Rollup is installed, it triggers a setup maintenance task for the CMG. This maintenance task launches deployments for CMG Resources in Azure. In the deployment associated to the Public IP Address, the maintenance task attempts to update its "Availability Zone" configuration property to **"No zone"**. If the existing Public IP resource already has "Availability Zone" property configured (for example, to "Zone 1", "Zone 2" or "Zone 3"), the deployment fails. |
| 69 | + |
| 70 | +The issue then affects the Azure regions where [Availability Zones](https://learn.microsoft.com/azure/reliability/availability-zones-overview?toc=%2Fazure%2Fvirtual-network%2Ftoc.json&tabs=azure-cli) are supported. The current list is available at [Azure regions list](https://learn.microsoft.com/azure/reliability/regions-list#azure-regions-list-1). |
| 71 | + |
| 72 | +Current Configuration Manager releases don't specify Availability Zone when creating a new Public IP Address Resource for CMG. Hence, this issue doesn't affect new CMG deployments. |
| 73 | + |
| 74 | +## Resolution |
| 75 | + |
| 76 | +At this point, there is no confirmed impact from this behavior. Hence, the recommended action is to ignore these errors. |
| 77 | + |
| 78 | +Microsoft plans resolving this problem in the future release of Microsoft Configuration Manager. |
| 79 | + |
| 80 | +## More information |
| 81 | + |
| 82 | +For more information about CMG monitoring, see [Monitor the CMG](https://learn.microsoft.com/intune/configmgr/core/clients/manage/cmg/monitor-clients-cloud-management-gateways) article. |
0 commit comments