Steven Major

Q: Profile Manager 5.1 Enrolled Clients Placeholders Only

I'm having an interesting problem with Server 5.1 and Profile Manager. After updating, when I enroll computers they are showing up as Placeholders only. Has anyone else seen this? As of yesterday, enrolling them works as expected prior to the update.

 

Even downloading the Trust Profile and logging into My Devices and downloading the profile, then installing, yields the same result.  The Activity section never shows the usual "Enrolled" profile that I'm accustomed to.

 

Our imaging workflow has not changed except that 10.11.4 is auto-updating, but we've not seen an update cause this.  I will try a vanilla 10.11.3 image we used before tomorrow.  I'm fairly certain, however, that one of us successfully enrolled a 10.11.4 machine this morning right before we did the server update.  By all accounts, including the logs, the server update was successfully.

 

Fortunately, we've learn hard lessons about Apple's server updates over the years so we run it as a VM. I'm rolling back to 10.11.3/Server 5.0.11 as I type.

Posted on Mar 22, 2016 2:20 PM

Close

Q: Profile Manager 5.1 Enrolled Clients Placeholders Only

  • All replies
  • Helpful answers

Page 1 of 3 last Next
  • by imathijs,

    imathijs imathijs Mar 23, 2016 6:43 AM in response to Steven Major
    Level 1 (4 points)
    Mar 23, 2016 6:43 AM in response to Steven Major

    Same issue we see today on our Profile Manager. System runs 10.10.5 with Server 5.0.15.

    Everything was working fine before 3/22/2016. Other thing we see is that profiles wont be pushed out to the new enrolled devices.

     

    Any help will be great.

  • by Steven Major,

    Steven Major Steven Major Mar 23, 2016 6:56 AM in response to imathijs
    Level 1 (44 points)
    Mar 23, 2016 6:56 AM in response to imathijs

    Good. I'm not crazy then. I rolled back and see the issue with the original configuration as well.

     

    What is your guest OS?  10.11.3 or .4?  I'm now seeing both.

  • by imathijs,

    imathijs imathijs Mar 23, 2016 7:02 AM in response to Steven Major
    Level 1 (4 points)
    Mar 23, 2016 7:02 AM in response to Steven Major

    We see it happens with guest OS 10.10.5, 10.10.3 and 10.10.4... Tried to enroll with /mydevices and manual, both give the same result.

    Something Apple need to fix?

  • by Steven Major,

    Steven Major Steven Major Mar 23, 2016 7:05 AM in response to imathijs
    Level 1 (44 points)
    Mar 23, 2016 7:05 AM in response to imathijs

    I'm guessing?  I enrolled one at about 10:30am est yesterday successfully.  By 11:14am it seems to be broken somehow.

  • by DavidOpdyke,

    DavidOpdyke DavidOpdyke Mar 23, 2016 7:11 AM in response to Steven Major
    Level 1 (149 points)
    Mar 23, 2016 7:11 AM in response to Steven Major

    I was having this same problem right before 10.11.4 and 5.1 hit.  I had two devices that showed up on the Server through DEP, but stayed placeholders after enrollment.  I did both updates, restarted the machine, restarted the server, and it's been good for 24 hours now (had 6 devices enroll yesterday with no issue).  My devices are all iOS, which sounds a bit different than your scenario.

  • by specsavers,

    specsavers specsavers Mar 23, 2016 7:18 AM in response to Steven Major
    Level 1 (4 points)
    Mar 23, 2016 7:18 AM in response to Steven Major

    Can confirm same issue, upgrading from 10.10.3 and server 5.0.15 to 10.10.4 and server 5.1 hasn't helped.

  • by Steven Major,

    Steven Major Steven Major Mar 23, 2016 7:21 AM in response to DavidOpdyke
    Level 1 (44 points)
    Mar 23, 2016 7:21 AM in response to DavidOpdyke

    I'm guessing it affects OS X machines only. Most of the work for the recent OS updates have been iOS-based and I bet they broke OS X in the process.  The fact that one of us has nothing changed and is using old/client server combinations and it's broken points to Apple.

     

    But we're not using DEP for our clients, we've completely "in-house" using a trusted profile for managing staff machines. I didn't think Apple's back-end changes tie so closely into something like that.

  • by specsavers,

    specsavers specsavers Mar 23, 2016 7:24 AM in response to Steven Major
    Level 1 (4 points)
    Mar 23, 2016 7:24 AM in response to Steven Major

    Guess its something to do with the Push part of the process, as placeholders are being created, somewhere in the notification push to or from the client to go and grab settings/profiles is either not getting generated or is going missing.

  • by Steven Major,

    Steven Major Steven Major Mar 23, 2016 7:58 AM in response to specsavers
    Level 1 (44 points)
    Mar 23, 2016 7:58 AM in response to specsavers

    I figured it might be a certificate issue, so I tried renewing.  Now it won't trust the Trust Profile Certificate even though I re-downloaded it.

     

    Time to roll back again, not that it will fix the original issue on this thread. What. A. Mess.

     

    Our CIO already wants to get rid of all Apple equipment on campus and this is just another nail in the coffin.  This just keeps happening with their updates and it has to stop.

  • by Bosco1983,

    Bosco1983 Bosco1983 Mar 23, 2016 8:02 AM in response to Steven Major
    Level 1 (61 points)
    Servers Enterprise
    Mar 23, 2016 8:02 AM in response to Steven Major

    Havent updated to server 5.1 yet but my client is 10.10.5 and im having the "placeholder" issue. 

     

    Client downloads enrollment and trust profiles fine and installs them.  Server detects the client is talking to it and makes a placeholder for it, and then thats it... nothing.  Left the server and client over night to see if it sorts out and no joy.

     

     

  • by imathijs,

    imathijs imathijs Mar 23, 2016 8:13 AM in response to Steven Major
    Level 1 (4 points)
    Mar 23, 2016 8:13 AM in response to Steven Major

    Found another issue, my workflow in Deploy Studio wont install the enrollment profile in the finalize script and hangs.

    I'll have another look tomorrow.

  • by specsavers,

    specsavers specsavers Mar 23, 2016 8:24 AM in response to imathijs
    Level 1 (4 points)
    Mar 23, 2016 8:24 AM in response to imathijs

    Yes, same problem(Deploystudio), thats what highlighted the problems for us in the first place.

  • by Steven Major,

    Steven Major Steven Major Mar 23, 2016 8:25 AM in response to imathijs
    Level 1 (44 points)
    Mar 23, 2016 8:25 AM in response to imathijs

    Ours too. We have a separate server/PM for our labs and that has stopped working too.  It hasn't been touched in weeks.

  • by Bosco1983,

    Bosco1983 Bosco1983 Mar 23, 2016 8:40 AM in response to specsavers
    Level 1 (61 points)
    Servers Enterprise
    Mar 23, 2016 8:40 AM in response to specsavers

    Our deploystudio did the same thing.  I even put the enroll profiles BEFORE software update, so the client should enroll using the OS version on the image, which isnt the version which came out yesterday.  Still stuck forever on the "enrolling profile" side of things.

     

    I reckon its to do with APN - wonder if Apple has forgotten to renew their certs again?

Page 1 of 3 last Next