Few Profile Manager issues

Question

Level 1

5 points

Few Profile Manager issues

First of all I have a problem with Device Enrollment with iOS13, suddenly using my enrollment profile

does not work. Everything works fine with 12.4.1 or older. All the profile does is that it adds device to the correct device group in profile manager, but I keep getting error regarding SCEP


The SCEP server configuration is not supported. 
[MCInstallationErrorDomain – 0xFA1 (4001)]

Why is SCEP even relevant on this step? I am running windows server for SCEP CA.

Second issue I have is that i have user groups in profile manager, but sometimes randomly few of the groups get emptied, so no members are shown. All is good on the server app. All I have to do is hit the refresh button on user groups and they all come back.

Thanks for any help!

Posted on Sep 17, 2019 10:58 PM

Reply

Answer 1

Madhu108 Author

Level 1

5 points

Oct 17, 2019 7:28 AM in response to Sindylpy

Any ideas? I replaced my SCEP servers with new ones that issue certs with proper EKU's like https://support.apple.com/en-us/HT210176 suggests, but enrolling iOS13 devices still does not work.

Phone log says this.

Installation failed. Error: NSError:
Desc   : Profile Installation Failed
Sugg   : The SCEP server configuration is not supported.
US Desc: Profile Installation Failed
US Sugg: The SCEP server configuration is not supported.
Domain : MCInstallationErrorDomain
Code   : 4001
Type   : MCFatalError
...Underlying error:
NSError:
Desc   : The SCEP server configuration is not supported.
US Desc: The SCEP server configuration is not supported.
Domain : MCSCEPErrorDomain
Code   : 22004
Type   : MCFatalError

Reply

Answer 2

Oct 18, 2019 4:31 AM in response to Madhu108

I think i have figured out the cause. Profile manager has it's own SCEP and it gives out device identity certificates but those have no EKU that is required in iOS13. How can I modify the Profile Manger Device Identity CA? By the way I'm running Server 5.8. Does anyone have idea maybe updating to 5.9 would help?

Reply

Answer 3

Madhu108 Author

Level 1

5 points

Dec 10, 2019 4:10 AM in response to Sindylpy

Hello, me and my profile manager again. Another issue rised today. The settings that are assigned to user profiles do not push anymore. They do not appear on active tasks. Device settings works perfectly. Anyone else had this issue? Server is 5.9

Reply