Skip navigation

Device Enrollment Time Out

1169 Views 5 Replies Latest reply: Feb 12, 2013 1:46 PM by busubi RSS
elgreco84 Level 1 Level 1 (0 points)
Currently Being Moderated
Sep 13, 2011 7:11 AM

I am stumped as to why I can't enroll a device with the server. I first install the trust profile and that works fine. Then when I try to enroll the device it looks like it it going to work, it says enrolling device but then sits on that screen for a while and I get a timeout error. I found what I think might be the error in the logs but I can't figre out what it means or how to resolve it. Here is the log:

 

Sep 12 20:03:31 iosmgmt sandboxd[6996] ([6995]): xscertd(6995) deny job-creation

Sep 12 20:03:32 iosmgmt sandboxd[6996] ([6997]): xscertd-helper(6997) deny file-read-metadata /private/var/db/DetachedSignatures

Sep 12 20:03:32 iosmgmt sandboxd[6996] ([6997]): xscertd-helper(6997) deny file-read-data /private/var/db/DetachedSignatures

Sep 12 20:03:32 iosmgmt com.apple.DeviceManagement.SCEPHelper[554]: 554:error:2107106C:PKCS7 routines:PKCS7_signatureVerify:unable to find message digest:/SourceCache/OpenSSL098/OpenSSL098-41/src/crypto/pkcs7/pk7_doit.c:930:

Sep 12 20:03:32 iosmgmt scep_helper[554]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:518 'SCEPRequestChallengePassword(session, username, password, requestDict, &challenge)' = -67688

Sep 12 20:03:32 iosmgmt scep_helper[554]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:819 'challenge = GetChallengeFromSCEP(password, guid, hostURL)' is NULL

 

I appreciate any help that you might be able to offer.

Mac mini, Mac OS X (10.7.1), iPhone device is running iOS 4.3
  • micliz Level 1 Level 1 (0 points)
    Currently Being Moderated
    Sep 13, 2011 12:42 PM (in response to elgreco84)

    I also have this issue, exact same error.

  • henryboogerspsu Level 1 Level 1 (10 points)
    Currently Being Moderated
    Nov 20, 2011 11:32 AM (in response to micliz)

    Me too... I am experiencing exactly the same issue with the same log entries.  Can not enroll any devices (everything is on the same LAN).

     

    Very frustrating.

     

    Any ideas?

  • henryboogerspsu Level 1 Level 1 (10 points)
    Currently Being Moderated
    Nov 20, 2011 11:42 AM (in response to henryboogerspsu)

    When attempting to enroll device to the server using the "My Devices" page it starts the process but then it fails with the following message on the Client:

     

     

    The profile “Device Enrollment (com.apple.ota.192.168.10.212.bootstrap)” could not be installed due to an unexpected error.

     

     

    The following entries appear in the server's system log:

     

     

    Nov 20 14:39:08 192 sandboxd[1785] ([1784]): xscertd(1784) deny job-creation

    Nov 20 14:39:09 192 sandboxd[1785] ([1786]): xscertd-helper(1786) deny file-read-metadata /private/var/db/DetachedSignatures

    Nov 20 14:39:09 192 sandboxd[1785] ([1786]): xscertd-helper(1786) deny file-read-data /private/var/db/DetachedSignatures

    Nov 20 14:39:09 192 com.apple.DeviceManagement.SCEPHelper[731]: 731:error:2107106C:PKCS7 routines:PKCS7_signatureVerify:unable to find message digest:/SourceCache/OpenSSL098/OpenSSL098-44/src/crypto/pkcs7/pk7_doit.c:930:

    Nov 20 14:39:09 192 scep_helper[731]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-702.13/scep_helper/m ain.m:518 'SCEPRequestChallengePassword(session, username, password, requestDict, &challenge)' = -67688

    Nov 20 14:39:09 192 scep_helper[731]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-702.13/scep_helper/m ain.m:819 'challenge = GetChallengeFromSCEP(password, guid, hostURL)' is NULL

  • MarkCPH Calculating status...
    Currently Being Moderated
    Dec 10, 2011 5:13 PM (in response to elgreco84)

    I got the exact same error.. Someone please help i'm pretty stuck here.

     

    Dec 11 02:09:51 backend sandboxd[3697] ([3696]): xscertd(3696) deny job-creation

    Dec 11 02:09:52 backend com.apple.DeviceManagement.SCEPHelper[3298]: 3298:error:2107106C:PKCS7 routines:PKCS7_signatureVerify:unable to find message digest:/SourceCache/OpenSSL098/OpenSSL098-44/src/crypto/pkcs7/pk7_doit.c:930:

    Dec 11 02:09:52 backend scep_helper[3298]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-702.13/scep_helper/m ain.m:518 'SCEPRequestChallengePassword(session, username, password, requestDict, &challenge)' = -67688

    Dec 11 02:09:52 backend scep_helper[3298]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-702.13/scep_helper/m ain.m:819 'challenge = GetChallengeFromSCEP(password, guid, hostURL)' is NULL

  • busubi Calculating status...
    Currently Being Moderated
    Feb 12, 2013 1:46 PM (in response to elgreco84)

    Has anyone ever figured this one out.  Im at a loss.  Crazy thing is 2 iphone will download and install the profile fine and one of my two macs will but one keeps giving me this fail error timed out.

Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.