Device Enrollment Time Out

Question

Level 1

0 points

Device Enrollment Time Out

I am stumped as to why I can't enroll a device with the server. I first install the trust profile and that works fine. Then when I try to enroll the device it looks like it it going to work, it says enrolling device but then sits on that screen for a while and I get a timeout error. I found what I think might be the error in the logs but I can't figre out what it means or how to resolve it. Here is the log:

Sep 12 20:03:31 iosmgmt sandboxd[6996] ([6995]): xscertd(6995) deny job-creation

Sep 12 20:03:32 iosmgmt sandboxd[6996] ([6997]): xscertd-helper(6997) deny file-read-metadata /private/var/db/DetachedSignatures

Sep 12 20:03:32 iosmgmt sandboxd[6996] ([6997]): xscertd-helper(6997) deny file-read-data /private/var/db/DetachedSignatures

Sep 12 20:03:32 iosmgmt com.apple.DeviceManagement.SCEPHelper[554]: 554:error:2107106C:PKCS7 routines:PKCS7_signatureVerify:unable to find message digest:/SourceCache/OpenSSL098/OpenSSL098-41/src/crypto/pkcs7/pk7_doit.c:930:

Sep 12 20:03:32 iosmgmt scep_helper[554]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:518 'SCEPRequestChallengePassword(session, username, password, requestDict, &challenge)' = -67688

Sep 12 20:03:32 iosmgmt scep_helper[554]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:819 'challenge = GetChallengeFromSCEP(password, guid, hostURL)' is NULL

I appreciate any help that you might be able to offer.

Mac mini, Mac OS X (10.7.1), iPhone device is running iOS 4.3

Posted on Sep 13, 2011 7:11 AM

Reply

Answer 1

micliz

Level 1

0 points

Sep 13, 2011 12:42 PM in response to elgreco84

I also have this issue, exact same error.

Reply

Answer 2

Nov 20, 2011 11:32 AM in response to micliz

Me too... I am experiencing exactly the same issue with the same log entries. Can not enroll any devices (everything is on the same LAN).

Very frustrating.

Any ideas?

Reply

Answer 3

Nov 20, 2011 11:42 AM in response to henryboogerspsu

When attempting to enroll device to the server using the "My Devices" page it starts the process but then it fails with the following message on the Client:

The profile “Device Enrollment (com.apple.ota.192.168.10.212.bootstrap)” could not be installed due to an unexpected error.

The following entries appear in the server's system log:

Nov 20 14:39:08 192 sandboxd[1785] ([1784]): xscertd(1784) deny job-creation

Nov 20 14:39:09 192 sandboxd[1785] ([1786]): xscertd-helper(1786) deny file-read-metadata /private/var/db/DetachedSignatures

Nov 20 14:39:09 192 sandboxd[1785] ([1786]): xscertd-helper(1786) deny file-read-data /private/var/db/DetachedSignatures

Nov 20 14:39:09 192 com.apple.DeviceManagement.SCEPHelper[731]: 731:error:2107106C:PKCS7 routines:PKCS7_signatureVerify:unable to find message digest:/SourceCache/OpenSSL098/OpenSSL098-44/src/crypto/pkcs7/pk7_doit.c:930:

Nov 20 14:39:09 192 scep_helper[731]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-702.13/scep_helper/m ain.m:518 'SCEPRequestChallengePassword(session, username, password, requestDict, &challenge)' = -67688

Nov 20 14:39:09 192 scep_helper[731]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-702.13/scep_helper/m ain.m:819 'challenge = GetChallengeFromSCEP(password, guid, hostURL)' is NULL

Reply

Answer 4

MarkCPH

Level 1

0 points

Dec 10, 2011 5:13 PM in response to elgreco84

I got the exact same error.. Someone please help i'm pretty stuck here.

Dec 11 02:09:51 backend sandboxd[3697] ([3696]): xscertd(3696) deny job-creation

Dec 11 02:09:52 backend com.apple.DeviceManagement.SCEPHelper[3298]: 3298:error:2107106C:PKCS7 routines:PKCS7_signatureVerify:unable to find message digest:/SourceCache/OpenSSL098/OpenSSL098-44/src/crypto/pkcs7/pk7_doit.c:930:

Dec 11 02:09:52 backend scep_helper[3298]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-702.13/scep_helper/m ain.m:518 'SCEPRequestChallengePassword(session, username, password, requestDict, &challenge)' = -67688

Dec 11 02:09:52 backend scep_helper[3298]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-702.13/scep_helper/m ain.m:819 'challenge = GetChallengeFromSCEP(password, guid, hostURL)' is NULL

Reply

Answer 5

busubi

Level 1

4 points

Feb 12, 2013 1:46 PM in response to elgreco84

Has anyone ever figured this one out. Im at a loss. Crazy thing is 2 iphone will download and install the profile fine and one of my two macs will but one keeps giving me this fail error timed out.

Reply