5 Replies Latest reply: Feb 12, 2013 1:46 PM by busubi
elgreco84 Level 1 Level 1 (0 points)

I am stumped as to why I can't enroll a device with the server. I first install the trust profile and that works fine. Then when I try to enroll the device it looks like it it going to work, it says enrolling device but then sits on that screen for a while and I get a timeout error. I found what I think might be the error in the logs but I can't figre out what it means or how to resolve it. Here is the log:

 

Sep 12 20:03:31 iosmgmt sandboxd[6996] ([6995]): xscertd(6995) deny job-creation

Sep 12 20:03:32 iosmgmt sandboxd[6996] ([6997]): xscertd-helper(6997) deny file-read-metadata /private/var/db/DetachedSignatures

Sep 12 20:03:32 iosmgmt sandboxd[6996] ([6997]): xscertd-helper(6997) deny file-read-data /private/var/db/DetachedSignatures

Sep 12 20:03:32 iosmgmt com.apple.DeviceManagement.SCEPHelper[554]: 554:error:2107106C:PKCS7 routines:PKCS7_signatureVerify:unable to find message digest:/SourceCache/OpenSSL098/OpenSSL098-41/src/crypto/pkcs7/pk7_doit.c:930:

Sep 12 20:03:32 iosmgmt scep_helper[554]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:518 'SCEPRequestChallengePassword(session, username, password, requestDict, &challenge)' = -67688

Sep 12 20:03:32 iosmgmt scep_helper[554]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:819 'challenge = GetChallengeFromSCEP(password, guid, hostURL)' is NULL

 

I appreciate any help that you might be able to offer.


Mac mini, Mac OS X (10.7.1), iPhone device is running iOS 4.3
  • 1. Re: Device Enrollment Time Out
    micliz Level 1 Level 1 (0 points)

    I also have this issue, exact same error.

  • 2. Re: Device Enrollment Time Out
    henryboogerspsu Level 1 Level 1 (10 points)

    Me too... I am experiencing exactly the same issue with the same log entries.  Can not enroll any devices (everything is on the same LAN).

     

    Very frustrating.

     

    Any ideas?

  • 3. Re: Device Enrollment Time Out
    henryboogerspsu Level 1 Level 1 (10 points)

    When attempting to enroll device to the server using the "My Devices" page it starts the process but then it fails with the following message on the Client:

     

     

    The profile “Device Enrollment (com.apple.ota.192.168.10.212.bootstrap)” could not be installed due to an unexpected error.

     

     

    The following entries appear in the server's system log:

     

     

    Nov 20 14:39:08 192 sandboxd[1785] ([1784]): xscertd(1784) deny job-creation

    Nov 20 14:39:09 192 sandboxd[1785] ([1786]): xscertd-helper(1786) deny file-read-metadata /private/var/db/DetachedSignatures

    Nov 20 14:39:09 192 sandboxd[1785] ([1786]): xscertd-helper(1786) deny file-read-data /private/var/db/DetachedSignatures

    Nov 20 14:39:09 192 com.apple.DeviceManagement.SCEPHelper[731]: 731:error:2107106C:PKCS7 routines:PKCS7_signatureVerify:unable to find message digest:/SourceCache/OpenSSL098/OpenSSL098-44/src/crypto/pkcs7/pk7_doit.c:930:

    Nov 20 14:39:09 192 scep_helper[731]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-702.13/scep_helper/m ain.m:518 'SCEPRequestChallengePassword(session, username, password, requestDict, &challenge)' = -67688

    Nov 20 14:39:09 192 scep_helper[731]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-702.13/scep_helper/m ain.m:819 'challenge = GetChallengeFromSCEP(password, guid, hostURL)' is NULL

  • 4. Re: Device Enrollment Time Out
    MarkCPH Level 1 Level 1 (0 points)

    I got the exact same error.. Someone please help i'm pretty stuck here.

     

    Dec 11 02:09:51 backend sandboxd[3697] ([3696]): xscertd(3696) deny job-creation

    Dec 11 02:09:52 backend com.apple.DeviceManagement.SCEPHelper[3298]: 3298:error:2107106C:PKCS7 routines:PKCS7_signatureVerify:unable to find message digest:/SourceCache/OpenSSL098/OpenSSL098-44/src/crypto/pkcs7/pk7_doit.c:930:

    Dec 11 02:09:52 backend scep_helper[3298]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-702.13/scep_helper/m ain.m:518 'SCEPRequestChallengePassword(session, username, password, requestDict, &challenge)' = -67688

    Dec 11 02:09:52 backend scep_helper[3298]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-702.13/scep_helper/m ain.m:819 'challenge = GetChallengeFromSCEP(password, guid, hostURL)' is NULL

  • 5. Re: Device Enrollment Time Out
    busubi Level 1 Level 1 (0 points)

    Has anyone ever figured this one out.  Im at a loss.  Crazy thing is 2 iphone will download and install the profile fine and one of my two macs will but one keeps giving me this fail error timed out.