SC VMM 2016 - bare-metal deployment error when trying BareMetalRegistrationService

Hello,

Got following error when try to discover server for Bare-Metal Deployment:

069C.06FC::01/28-10:00:18.055#00:DeepDiscoveryDataReader.cpp(433): IsOffline: false
069C.06FC::01/28-10:00:18.055#00:DeepDiscoveryDataReader.cpp(436):
069C.06FC::01/28-10:00:18.071#00:DeepDiscoveryDataReader.cpp(414): <--LogMsftDiskData
069C.06FC::01/28-10:00:18.071#00:DeepDiscoveryDataReader.cpp(747): <--CDeepDiscoveryDataReader::GetDisksData
069C.06FC::01/28-10:00:18.071#00:DeepDiscoveryDataReader.cpp(888): <--CDeepDiscoveryDataReader::GetDeepDiscoveryData
069C.06FC::01/28-10:00:18.071#00:RegUtils.cpp(281): RegGetVariantValue [Software\Microsoft\Microsoft System Center Virtual Machine Manager Agent\Settings]\[BareMetalRegistrationService]
069C.06FC::01/28-10:00:18.071#00:NativeWSChannel.cpp(20): ==>WSUtility::NativeWebServiceChannel::NativeWebServiceChannel
069C.06FC::01/28-10:00:18.071#00:NativeWSChannel.cpp(20): <--WSUtility::NativeWebServiceChannel::NativeWebServiceChannel
069C.06FC::01/28-10:00:18.071#00:NativeWSChannel.cpp(133): ==>WSUtility::NativeWebServiceChannel::RegisterClient
069C.06FC::01/28-10:00:18.071#00:NativeWSChannel.cpp(376): ==>WSUtility::NativeWebServiceChannel::CreateCertTokenMessageSecurityBinding
069C.06FC::01/28-10:00:18.134#00:NativeWSChannel.cpp(376): <--WSUtility::NativeWebServiceChannel::CreateCertTokenMessageSecurityBinding
069C.06FC::01/28-10:00:18.134#00:NativeWSChannel.cpp(543): ==>WSUtility::NativeWebServiceChannel::CreateSSLTransportSecurityBinding
069C.06FC::01/28-10:00:18.134#00:NativeWSChannel.cpp(543): <--WSUtility::NativeWebServiceChannel::CreateSSLTransportSecurityBinding
069C.06FC::01/28-10:00:18.375#00:NativeWSChannel.cpp(207)[0000000F5F6FEB: ThrowOnFailure : 803d000a. Operation attempted WSHttpBinding_IPhysicalMachineRegistrationService_RegisterPhysicalMachine( get(m_wsProxy), identifier, data, get(m_wsHeap), 0, 0, 0, get(m_wsError))
069C.06FC::01/28-10:00:18.375#00:exceptions.cpp(97)[0000000F5F6FEB: CarmineException::CarmineException: CarmineError: 1051488,  hr: 0x803d000a
069C.06FC::01/28-10:00:18.391#00:NativeWSChannel.cpp(580): Failure: errorCode=0x803d000a
069C.06FC::01/28-10:00:18.391#00:NativeWSChannel.cpp(601): An unsecured fault was received on a secure channel.
069C.06FC::01/28-10:00:18.391#00:NativeWSChannel.cpp(601): A security header with local name 'Security' and namespace 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd' was required, but was not present in the message.  The sender may not have been configured with message security.
069C.06FC::01/28-10:00:18.391#00:NativeWSChannel.cpp(133): <--WSUtility::NativeWebServiceChannel::RegisterClient

Any ideas?

Already checked at:

https://social.technet.microsoft.com/Forums/systemcenter/en-US/f2d6571f-f78c-4028-aff4-583638a4df53/vmm-2012-sp1-baremetal-deployment-pxe-issue?forum=virtualmachinemanager

ADSI OK, WDS config OK, but from

https://social.technet.microsoft.com/Forums/systemcenter/en-US/0b9ea783-3d9a-4978-bd78-46e36b667804/vmm-2012-beta-bare-metal-deployment-on-dell-r710-unable-to-pxe-boot?forum=virtualmachinemanager

"The VMM OSD provider is installed, but can't talk back to the VMM server.  Is this an all in one installation where VMM and WDS are running on the same machine?  From the WDS server what happens when you open a browser and connect to the URL in the Server key referenced above (substitute "http" for "net.tcp" in the URL)"

Doesn`t display web page

Latest patched WS 2k16, VMM 2016