Can you provide the server response to the enrollment request like you did for https://osquery.slack.com/archives/C1XCLA5DZ/p1519324487000723?

I0222 162343.138703 4476 tls_enroll.cpp:63] TLSEnrollPlugin requesting a node enroll key from: https://x.x.x.x:8080/api/v1/osquery/enroll I0222 162343.138703 4544 interface.cpp:89] Thrift message: TPipe ::GetOverlappedResult errored GLE=errno = 109 I0222 162343.138703 4544 interface.cpp:89] Thrift message: TConnectedClient died: TPipe: GetOverlappedResult failed I0222 162343.138703 5656 interface.cpp:89] Thrift message: TPipe ::GetOverlappedResult errored GLE=errno = 109 I0222 162343.138703 5656 interface.cpp:89] Thrift message: TConnectedClient died: TPipe: GetOverlappedResult failed I0222 162343.810552 4416 tls_enroll.cpp:63] TLSEnrollPlugin requesting a node enroll key from: https://x.x.x.x:8080/api/v1/osquery/enroll I0222 162343.810552 2784 interface.cpp:89] Thrift message: TPipe ::GetOverlappedResult errored GLE=errno = 109 I0222 162343.810552 2784 interface.cpp:89] Thrift message: TConnectedClient died: TPipe: GetOverlappedResult failed I0222 162343.810552 5916 interface.cpp:89] Thrift message: TPipe ::GetOverlappedResult errored GLE=errno = 109 I0222 162343.810552 5916 interface.cpp:89] Thrift message: TConnectedClient died: TPipe: GetOverlappedResult failed I0222 162343.841809 2652 tls_enroll.cpp:63] TLSEnrollPlugin requesting a node enroll key from: https://x.x.x.x:8080/api/v1/osquery/enroll I0222 162343.841809 5588 interface.cpp:89] Thrift message: TPipe ::GetOverlappedResult errored GLE=errno = 109 I0222 162343.841809 5588 interface.cpp:89] Thrift message: TConnectedClient died: TPipe: GetOverlappedResult failed I0222 162343.841809 2240 interface.cpp:89] Thrift message: TPipe ::GetOverlappedResult errored GLE=errno = 109 I0222 162343.841809 2240 interface.cpp:89] Thrift message: TConnectedClient died: TPipe: GetOverlappedResult failed I0222 162345.185578 4476 tls.cpp:198] TLS/HTTPS POST request to URI: https://x.x.x.x:8080/api/v1/osquery /enroll {"enroll_secret":"xxxxxxxxxxxxxxxxxxxxxxxxxxx","host_identifier":"9DC61442-B7FD-B9B6-1BB5-320C5EA0D064","platform_t ype":"2","host_details":

Did these logs all occur sequentially in a single run of

osqueryd

? I see three different node keys here... Some successful looking requests, some unsuccessful... And perhaps a mysteriously corrupted node key? It's hard to really make sense of it. Maybe including the whole log from a single run of

osqueryd

would help.

Let me log everything to a file and send it to you

Possibly there is some bug in osquery? If you can repro this please file an issue.