macOS Server 5.2 Profile manager enrol error

Question

Level 1

80 points

macOS Server 5.2 Profile manager enrol error

Already enrolled iOS devices works fine. But all to-be enrolled devices with different iOS version, ie.10.3, 10.2.1, 10.2 or 9.3.5 can not enroll in the profile manager anymore via web page of macOS Server.

It shows

""""""""""""""""""""""""""""""""""""""""

Profile Installation Failed

A network error has occured!

""""""""""""""""""""""""""""""""""""""""

It is frustrating!

Anyone got the same experience? Or Anyone get the different behaviours as I do?

Help please!

iPhone 6s, iOS 10.3

Posted on Apr 3, 2017 1:28 AM

Reply

Answer 1

mysoros Author

Level 1

80 points

Apr 5, 2017 6:55 PM in response to mscott_mdm

I tried to upgrade to 5.3, the situation suffer the same. Then I searched the web and found suggestions to enable those certificate in Setting -> General -> Certificate Trust Setting to test. Still failed in 5.3, then I fall back my server to 5.2.

Bingo, it works somehow.

Finally, I called the business team of Apple and mention this situation, they seems admitted that the profile manager 5.3 might be broken. What is worser, they asked me to join 3rd party software for zero-day compatibility of iOS 10.3.

It is disappointing me.

Reply

Answer 2

Apr 6, 2017 7:22 PM in response to mysoros

It's always been documented that port 80 was used by Profile Manager. <https://support.apple.com/en-us/HT202944> Depending on how you used it before, you could get away with not having port 80 open to PM, but not as of Server 5.3.

Reply

Answer 3

Apr 5, 2017 9:53 AM in response to mysoros

For Server 5.2, look for errors in the file at /Library/Logs/ProfileManager/scep_helper.log. (Feel free to paste the error messages here.) Depending on the problem, you may want to upgrade to Server 5.3.

Reply

Answer 4

Apr 6, 2017 3:20 PM in response to mysoros

FWIW, Server 5.3 requires that port 80 be unblocked to be able to enroll devices. Without more information, I can't offer any ideas as to why either version aren't working. However, I know from person experience that the latest version of Profile Manager (normally) supports iOS 10.3 just fine.

Reply

Answer 5

mysoros Author

Level 1

80 points

Apr 6, 2017 6:24 PM in response to mscott_mdm

Is that mean they changed the requirement for profile manger 5.3 that port 80 become compulsory? Any release notes about this?

Reply

Answer 6

mysoros Author

Level 1

80 points

Apr 6, 2017 7:45 PM in response to mscott_mdm

It is not expected that they changed behavoiur without further notice. As we all know, port 80 should be avoided in term of security aspect by all means.

Reply