Profile Manager configurations signed with expired cert

I've been beating my head against a wall trying to get OS X Mavericks Server's Profile Manager working correctly. The problem that I'm having seems a bit esoteric, as I've not seen anyone else report this same issue.


When enrolling a MacBook through the MyDevices page, I am able to successfully download and install the Trust profile and the Remote Management (enrollment) profile. Both install fine, and both show up with the green "verified" label in System Preferences->Profiles. However, once they're both installed, the computer then downloads the "Settings for All Company MacBooks" profile configuration which contains my custom settings -- things like the company wi-fi setup, VPN, and others. THIS profile shows up with a red "Unverified" label. When I check to see what the problem is, it says that the Code Signing certificate that was used to sign the profile is expired.


The weird bit is that the cert is NOT expired. I renewed it, and the renewal went through fine. In fact, the other two items (the Trust profile and the Remote Management (enrollment) profile) which show up with the green "verified" label are signed with the renewed Code Signing cert. For some reason though, the pushed settings are NOT getting signed with the renewed cert.


Has anyone else seen a problem like this, and if so, Help, Please?

OS X Server

Posted on Dec 17, 2013 3:02 PM

Reply
4 replies

Dec 20, 2013 3:39 PM in response to jr-it-support

Ha, wow. What a coincidence (maybe). I dealt with this not even an hour ago.


Is it a setting you made on the old code signing certificate? If so, delete the setting using the web interface of profile manager, then recreate the identical setting. It will deploy properly and be VERIFIED in green.


I haven't done enough experimenting yet, but it appears this must be done on all previously created settings.


--Dan

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Profile Manager configurations signed with expired cert

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.