Configuration Profile with MDM Payload not getting installed

Question

Hi,I am working on MDM stuff, trying to install Configuration Profile having MDM payload, but its not getting installed on the device.Please help me to resolve this, here is Payload content.&lt;?xml version&#x3D;"1.0" encoding&#x3D;"UTF-8"?&gt;&lt;!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"&gt;&lt;plist version&#x3D;"1.0"&gt;&lt;dict&gt;    &lt;key&gt;PayloadContent&lt;/key&gt;    &lt;array&gt;        &lt;dict&gt;            &lt;key&gt;AccessRights&lt;/key&gt;            &lt;integer&gt;2047&lt;/integer&gt;            &lt;key&gt;CheckInURL&lt;/key&gt;            &lt;string&gt;https://192.168.1.101:8080/xyz/profile&lt;/string&gt;            &lt;key&gt;IdentityCertificateUUID&lt;/key&gt;            &lt;string&gt;00000000-0000-0000-0000-000000000000&lt;/string&gt;            &lt;key&gt;PayloadDescription&lt;/key&gt;            &lt;string&gt;Configures MobileDeviceManagement.&lt;/string&gt;            &lt;key&gt;PayloadIdentifier&lt;/key&gt;            &lt;string&gt;com.xyz.mdm.mdm1&lt;/string&gt;            &lt;key&gt;PayloadOrganization&lt;/key&gt;            &lt;string&gt;Xyz&lt;/string&gt;            &lt;key&gt;PayloadType&lt;/key&gt;            &lt;string&gt;com.apple.mdm&lt;/string&gt;            &lt;key&gt;PayloadUUID&lt;/key&gt;            &lt;string&gt;XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX&lt;/string&gt;            &lt;key&gt;PayloadVersion&lt;/key&gt;            &lt;integer&gt;1&lt;/integer&gt;            &lt;key&gt;ServerURL&lt;/key&gt;            &lt;string&gt;https://192.168.1.101:8080/xyz/profile&lt;/string&gt;            &lt;key&gt;SignMessage&lt;/key&gt;            &lt;false/&gt;            &lt;key&gt;Topic&lt;/key&gt;            &lt;string&gt;com.apple.mgmt.xyz&lt;/string&gt;            &lt;key&gt;UseDevelopmentAPNS&lt;/key&gt;            &lt;true/&gt;        &lt;/dict&gt;    &lt;/array&gt;    &lt;key&gt;PayloadDescription&lt;/key&gt;    &lt;string&gt;MDM Profile&lt;/string&gt;    &lt;key&gt;PayloadDisplayName&lt;/key&gt;    &lt;string&gt;MDM&lt;/string&gt;    &lt;key&gt;PayloadIdentifier&lt;/key&gt;    &lt;string&gt;com.xyz.mdm&lt;/string&gt;    &lt;key&gt;PayloadOrganization&lt;/key&gt;    &lt;string&gt;Xyz&lt;/string&gt;    &lt;key&gt;PayloadRemovalDisallowed&lt;/key&gt;    &lt;false/&gt;    &lt;key&gt;PayloadType&lt;/key&gt;    &lt;string&gt;Configuration&lt;/string&gt;    &lt;key&gt;PayloadUUID&lt;/key&gt;    &lt;string&gt;XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX&lt;/string&gt;    &lt;key&gt;PayloadVersion&lt;/key&gt;    &lt;integer&gt;1&lt;/integer&gt;&lt;/dict&gt;&lt;/plist&gt;

pschaeffer · Answer

The Identity field in the MDM payload section of a configuration profile can only be set AFTER you have set the correct credential in the Credentials section. If you have set the correct credential in the Credentials section, then you will (in my experience) only have one choice for Identity in the MDM payload section. It will be the correct choice fortunately.To set the correct credential in the Credentials section of the configuration profile, you must have a valid personal certificate in the Windows certificate store. If you have a valid personal certificate in the Windows certificate store it will show up in the (very long) list of certificates you can choose from when you click on  Configure in the Credentials section. You should be prompted for the password for &#x27;exporting your identity&#x27;. Fill in both boxes and then click on OK. The set the password again. Yes, the password must be entered three times.At this point you can go back to the MDM payload section and everything should be OK.Note that my comments only apply to Windows. My system is Windows 7. However, only version of Windows probably works the same.

effrey · Answer

We solved the issue of using the correct IdentityCertificateUUID  by combining the SCEP and MDM configurations into the same mobileconfig. The SCEP configuration PayloadUUID will equal the MDM IdentityCertificateUUID.Figured this one out by first creating the combined profile using the Configuration Profiles feature of the iPhone Configuration Utility.

TransAtlanticDan · Answer

Same problem, have no idea what to select for the certificate in the "Identity" field.

tomer51 · Answer

Same problem here. @abhinay_jdhv - have you had any progress with it? Any idea why it&#x27;s not working?