Configuration failed. How to proceed?

iPhone 11

Posted on May 4, 2023 7:45 PM

Reply
Question marked as Top-ranking reply

Posted on May 5, 2023 2:16 AM

Contact your IT administrator or MDM provider to obtain the latest MDM profile.

  1. Is this your corporate iPhone? Then please contact the system administrator of your corporate
  2. If it is your personal device, in that case, do you have any profile installed by your corporate/organisation/enterprise/School Management?
    1. Erase the profile added by you If you have installed a profile on your own --> Install or remove configuration profiles on iPhone - Apple ...
    2. Or please contact the system administrator of the organisation who provided the profile to you
  3. If you want to turn on SSL trust for that certificate, go to Settings > General > About > Certificate Trust Settings. Under "Enable full trust for root certificates," turn on trust for the certificate. Apple recommends deploying certificates via Apple Configurator or Mobile Device Management (MDM). --> Trust manually installed certificate profiles in iOS and iPadOS ...



The error message you mentioned, "The new MDM payload does not match the old payload. Mismatched keys: CheckInURL," indicates a mismatch between the Mobile Device Management (MDM) payloads during the installation of an MDM profile on an iPhone. Read for more...


MDM is a technology that allows organizations to remotely manage and configure mobile devices, such as iPhones, iPads, and other mobile platforms. It enables IT administrators to enforce security policies, distribute applications, and manage device settings.


When an MDM profile is installed on an iPhone, it contains various payloads, which are sets of configuration settings and instructions for the device. These payloads specify different aspects of device management, such as security policies, network settings, application restrictions, and more.


The error message suggests that there is a mismatch between the payloads in the new MDM profile and the previous one installed on the device. Specifically, it indicates that the "CheckInURL" key in the new payload does not match the one in the old payload.


The "CheckInURL" is a URL that the device uses to communicate with the MDM server and send status updates, check for commands, and receive configurations. It acts as a crucial connection point between the device and the MDM server.


A mismatch in the "CheckInURL" key could occur due to various reasons, such as:

  1. Configuration changes: The MDM administrator might have made changes to the MDM server's configuration, including the "CheckInURL" value, which resulted in a new MDM profile being generated.
  2. Profile update or reinstallation: The MDM profile on the device might have been updated or reinstalled, but the new profile contains different configuration settings, including the "CheckInURL" value.


To resolve this issue, you can try the following steps:

  1. Remove the existing MDM profile: Go to the "Settings" app on your iPhone, select "General," then "Profiles." Find the existing MDM profile and remove it. This will remove the old payload and associated settings.
  2. Reinstall the MDM profile: Contact your IT administrator or MDM provider to obtain the latest MDM profile. Install the new profile on the device, following the provided instructions. Ensure that the new profile contains the correct and updated "CheckInURL" value.


By removing the old profile and installing the new one, you should be able to resolve the mismatched keys issue and establish a proper connection between the device and the MDM server. However, if the problem persists, it would be best to consult with your IT administrator or MDM provider for further assistance and troubleshooting.

1 reply
Question marked as Top-ranking reply

May 5, 2023 2:16 AM in response to abhisek273

Contact your IT administrator or MDM provider to obtain the latest MDM profile.

  1. Is this your corporate iPhone? Then please contact the system administrator of your corporate
  2. If it is your personal device, in that case, do you have any profile installed by your corporate/organisation/enterprise/School Management?
    1. Erase the profile added by you If you have installed a profile on your own --> Install or remove configuration profiles on iPhone - Apple ...
    2. Or please contact the system administrator of the organisation who provided the profile to you
  3. If you want to turn on SSL trust for that certificate, go to Settings > General > About > Certificate Trust Settings. Under "Enable full trust for root certificates," turn on trust for the certificate. Apple recommends deploying certificates via Apple Configurator or Mobile Device Management (MDM). --> Trust manually installed certificate profiles in iOS and iPadOS ...



The error message you mentioned, "The new MDM payload does not match the old payload. Mismatched keys: CheckInURL," indicates a mismatch between the Mobile Device Management (MDM) payloads during the installation of an MDM profile on an iPhone. Read for more...


MDM is a technology that allows organizations to remotely manage and configure mobile devices, such as iPhones, iPads, and other mobile platforms. It enables IT administrators to enforce security policies, distribute applications, and manage device settings.


When an MDM profile is installed on an iPhone, it contains various payloads, which are sets of configuration settings and instructions for the device. These payloads specify different aspects of device management, such as security policies, network settings, application restrictions, and more.


The error message suggests that there is a mismatch between the payloads in the new MDM profile and the previous one installed on the device. Specifically, it indicates that the "CheckInURL" key in the new payload does not match the one in the old payload.


The "CheckInURL" is a URL that the device uses to communicate with the MDM server and send status updates, check for commands, and receive configurations. It acts as a crucial connection point between the device and the MDM server.


A mismatch in the "CheckInURL" key could occur due to various reasons, such as:

  1. Configuration changes: The MDM administrator might have made changes to the MDM server's configuration, including the "CheckInURL" value, which resulted in a new MDM profile being generated.
  2. Profile update or reinstallation: The MDM profile on the device might have been updated or reinstalled, but the new profile contains different configuration settings, including the "CheckInURL" value.


To resolve this issue, you can try the following steps:

  1. Remove the existing MDM profile: Go to the "Settings" app on your iPhone, select "General," then "Profiles." Find the existing MDM profile and remove it. This will remove the old payload and associated settings.
  2. Reinstall the MDM profile: Contact your IT administrator or MDM provider to obtain the latest MDM profile. Install the new profile on the device, following the provided instructions. Ensure that the new profile contains the correct and updated "CheckInURL" value.


By removing the old profile and installing the new one, you should be able to resolve the mismatched keys issue and establish a proper connection between the device and the MDM server. However, if the problem persists, it would be best to consult with your IT administrator or MDM provider for further assistance and troubleshooting.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Configuration failed. How to proceed?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.