Newsroom Update
Beginning in May, a special Today at Apple series titled “Made for Business” will offer small business owners and entrepreneurs free opportunities to learn how Apple products and services can support their growth and success. Learn more >
Beginning in May, a special Today at Apple series titled “Made for Business” will offer small business owners and entrepreneurs free opportunities to learn how Apple products and services can support their growth and success. Learn more >
I'm able to install the trust profile on an iPhone, but when I attempt to "Enroll" my device and I click "Install" it begins the process,
Installing Profile, Generating Key, Enrolling Certificate and gets stuck and reports a network issue.
I'm also hoping we can get our hands on some proper lion documentation. The resource page is pretty bleak right now.
What Lion Server documentation.....
Hi
At the moment this is probably the best there is:
http://help.apple.com/advancedserveradmin/mac/10.7/
HTH?
Tony
Yeah, I found my way to that on the resources page, but really?! Common. We need real documentation for a server.
It was this way at the begging of 10.6 Server too. No major attention in the media or fanfare from Apple. I do remember PDFs though...
Grant
"It was this way at the beginning of 10.6 Server . . ."
Nothing changes as it's always been this way going back to at least 10.3 Server. Besides I would not set too much store by Apple's Admin Manuals. Most of them are too generalised or not specific enough to be of any real use and occasionally some are just wrong. Again that has always been the case going back to at least 10.3.
HTH?
Tony
For device enrollment, Port 1640. For locking/updating/wiping it appears to be going to gateway.push.apple.com on 2195
Edit: As far as I can tell, this is currently documented....nowhere.
Basically to use the entire service correctly - on your servers end - assuming you don't block outgoing you need the following ports open on firewalls and forwarded to your MDM Server
Thank you. Where can I find more information about this, these services and ports?
Again, back to the discussion above about "Where is the documentation?! Common!" as it's officially to be titled.
There does need to be more documentation.
Narrowing those ports down came to lots of google, browsing various documentation sites and piecing it together via trial and error.
Same with VPN.
VPN is noted in Apple's help docs that come with server, but I saw no reference to ports for MDM.
Apple has always kept a kbase with Apple ports. Google "apple well known ports" and the first link should take you to Apple kbase.
But they don't tell me - is the connection incoming or outgoing?
This information is necessary for my Firewall Admin.
Does somebody know the Port directions?
Thanks
Daniel Ball wrote:
Apple has always kept a kbase with Apple ports. Google "apple well known ports" and the first link should take you to Apple kbase.
Yea they should have that info on the kbase. I have been reading up on this as well, as my clients never worked and finding out you need ports open.
I believe this is correct, if not someone correct me:
Ports for Profile Manager - 2195, 2196, 5223, 1640, 80, 443 Apple Server block to open too: 17.0.0.0/8
TCP Port 2195 and 2196 should be "oubound" from Profile Manager Server to 17.0.0.0/8.
TCP Port 5223 "outbound" from LAN for clients to 17.0.0.0/8
TCP Port 443 and 1640 "inbound" to Profile Manager server. I would think port 80 as well, but any login I would put a cert on and use only 443. Not sure if 80 is really needed.
What ports need to be open for device enrollment?
