Can not re-enroll devices on Profile Manager (Server 5.3.1)

Update:

Meanwhile I have tried to work with a new profilemanager database by wiping the existing one (on a backup)

sudo /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/config/wipeDB

the result is even bad: the server returned secp error to the clients who tried to install the MDM profile

Any suggestions?

Update II:

Did someone figured out the same behavior? iOS clients 12.x will still access the MDM profile and can be bound to OS X Server 5.3.x; Clients from iOS 13.x (I got 13.4.x for testing) do not any longer (they End up in a Server (SCEP) Error.)

Could this be a basic problem with server 5.3 (Sierra) and latest iOS versions?

Thanks for the helpful Screenshots! Even if I try that way the result is ending up in still waiting process. After all I have read: if a certificate runs out of date I needs that wireless connected clients like iPads, MDM must deleted and re-enrolled again.

And this procedure did not function anymore with iOS Clients 13.4.x Still 12.x.x clients could be enrolled.

Could you please advice at your System (what Server Version did you use?) if you can enroll MDM on Clients with latest iOS?

Hello MaXenael,

thanks for the advice! I have tested to update Groups & Users. Groups it self seems to work fine, but then I also tried to update Users and it end up in the "spinning wheel"

Today I received a brand new iPad and figured out that even this one now ends up with the result of a error while the profile installation.

It seems that there is a overall certificate problem that blocks the server to accept new devices an even stops pushing profile to well known devices.

Did anyone knows the procedure to completely update (or renew) (self-signed) certificates to the server?