OTA : Phase 1 certificate problem

Question

Level 1

0 points

OTA : Phase 1 certificate problem

Hello,

I'm trying to setup OTA Enrollment and succeeded in downloading the first Profile Service....but I'm unable to install and got the given message : "The server certificate for <my profile service URL> is invalid."
This is exactly the same server as the one I used to get the initial profile with self signed certificate.

The profile is not signed....How can I make it work ?

David

MacBook Pro, iOS 4

Posted on Dec 12, 2010 1:00 PM

Reply

Answer 1

kattmat

Level 1

1 points

Dec 16, 2010 5:20 AM in response to DLTAStudio

I'm having the exact same problem. Self-signed CA and server certificate, device tells me the profile service URL certificate is invalid.

Reply

Answer 2

Dec 19, 2010 6:46 PM in response to DLTAStudio

hi,
if you using microsoft server , you should set the SCEP server url is http://<scep host>/certsrv/mscep/

Reply

Answer 3

Jan 5, 2011 10:43 PM in response to OTA mobile config

Hi,

can you please explain what "*set the SCEP server url is http://<scep host>/certsrv/mscep/*" mean ?? How to do this ?

Thanx in advance..

Reply

Answer 4

jan Deng

Level 1

0 points

Mar 1, 2011 6:48 PM in response to DLTAStudio

Hi, I have the same problem like you. Have resolved this problem?

Reply

Answer 5

jan Deng

Level 1

0 points

Mar 3, 2011 10:45 PM in response to jan Deng

I request a free SSL server certificate from 3rd party CA which is in the list of http://support.apple.com/kb/HT3580. And then set my profile server's domain to be the same as the common name of the server certificate. Then this issue can be resolved. However, There still is a warning before installing the last .mobileconfig which apple said there will be no user intervention required.

Reply

Answer 6

ysu

Level 1

0 points

Mar 31, 2011 2:44 AM in response to jan Deng

Hi jan,

Care to let me know which 3rd party CA you applied for?

Thanks

Reply

Answer 7

Jul 19, 2011 1:07 PM in response to jan Deng

Thanks Jan for the update! Which CA vendor did you use?

Reply