Can't enroll some iOS devices to profile manager

Question

Level 1

8 points

Can't enroll some iOS devices to profile manager

Hello,

I am trying to enroll iOS devices to profile manager, I have successfully enrolled 14 devices, I am trying to enroll 3 more and I go to Apple configurator 2 and prepare the device, then I open the website in Safari and click enroll, I don't get any errors and the remote management is in the settings, but the device only shows as Placeholder in the profile manager.

These are all devices that are the same, iOS version 10.3.2, the network configuration is the same for all, I did manage to get one of the 3 to enroll but the settings would not apply and just get a status of failed in profile manager.

I need help with this, we are rolling out an internal app next week and I need these devices setup.

Thank you,

Guy

iPod touch, iOS 10.3.2

Posted on May 25, 2017 7:39 AM

Reply

Answer 1

May 30, 2017 9:55 AM in response to no1itguy

The "Authenticate" request is the last one in the logs when you attempt to enroll? This suggests that the device is not able to get an APNS token, as the next request should be a "TokenUpdate" request. Can the device connect to the internet (specifically, apple.com) on port 443? If there's a content filter or firewall blocking (or getting in the middle of) connections to apple.com, that would explain the problem.

Reply

Answer 2

May 25, 2017 1:44 PM in response to no1itguy

You should look in the log file at /Library/Logs/ProfileManager/php.log. There are probably errors in there that will give you clues. If you can't make sense of the errors, feel free to paste them here and I'll see if I can help.

Reply

Answer 3

no1itguy Author

Level 1

8 points

May 26, 2017 7:44 AM in response to mscott_mdm

Hi, the only error I can see is no signing certificate specified, there is nothing that has changed and there were iPods registered before and after these. This is what the log shows.

1:: [348] [2017/05/26 10:38:23.997] <fe80::143a:cfdc:48b:e8d> >>> Processing POST mdm_enroll

1:: [348] [2017/05/26 10:38:24.031] <fe80::143a:cfdc:48b:e8d> iOS version 10.3.2

0:: [348] [2017/05/26 10:38:24.052] <fe80::143a:cfdc:48b:e8d> No signing certificate specified, unable to sign.

1:: [348] [2017/05/26 10:38:24.053] <fe80::143a:cfdc:48b:e8d> <<< Sent Final Output (7424 bytes) - POST mdm_enroll

0:: [348] [2017/05/26 10:38:24.053] <fe80::143a:cfdc:48b:e8d> Completed in 59ms | 200 OK [https://imac.local/devicemanagement/mdm/mdm_enroll]

1:: [1066] [2017/05/26 10:38:31.730] <fe80::143a:cfdc:48b:e8d> >>> Processing PUT mdm_checkin

0:: [1066] [2017/05/26 10:38:31.733] <fe80::143a:cfdc:48b:e8d> checkin: "Authenticate"

1:: [1066] [2017/05/26 10:38:31.779] <fe80::143a:cfdc:48b:e8d> <<< Sent Final Output (0 bytes) - PUT mdm_checkin

0:: [1066] [2017/05/26 10:38:31.779] <fe80::143a:cfdc:48b:e8d> Completed in 51ms | 200 OK [https://imac.local/devicemanagement/api/device/mdm_checkin]

Reply

Answer 4

no1itguy Author

Level 1

8 points

May 30, 2017 9:34 AM in response to mscott_mdm

Thank you for the reply, I am not sure what it would be, all the devices are connected to the same AP and I have 14 that are enrolled without issues. I will talk to the network guys and see if that could be an issue. I will post the answer if that solves the problem.

Reply

Answer 5

no1itguy Author

Level 1

8 points

May 30, 2017 9:55 AM in response to mscott_mdm

Hi,

Thank you very much for your assistance, the network people had put restrictions on the 3 devices, they will be removing them and that should be it.

Thank you,

Guy

Reply