Want to highlight a helpful answer? Upvote!
Did someone help you, or did an answer or User Tip resolve your issue? Upvote by selecting the upvote arrow. Your feedback helps others! Learn more about when to upvote >
Did someone help you, or did an answer or User Tip resolve your issue? Upvote by selecting the upvote arrow. Your feedback helps others! Learn more about when to upvote >
Looks like if you don't have a fully qualified name with a valid ssl cert, ios 12 devices can't be enrolled.
You'll get a "a network error has occured" during the DEP enrollment process.
This also happens if you try to manually do it in "My Devices".
This is with 5.6.3
Did not try it before the update.
iOS 12, profile manager
ive been looking into this - if you create a fresh build of mojave with server 5.7.1 you can enrol using built in self signed certs... however if you try to enrol an iOS 12 device into a server that is using a self signed cert before mojave (even if you install relevant trust profile) you get an error about App Transport Security requiring the use of a secure connection when it tries to download the SCEP profile.... still investigating on ways to get this working on a High Sierra box - if you upgrade the OS and server app to mojave it makes no difference in my testing - you need to build the box from the ground up using mojave for it to work...
ive been looking into this - if you create a fresh build of mojave with server 5.7.1 you can enrol using built in self signed certs... however if you try to enrol an iOS 12 device into a server that is using a self signed cert before mojave (even if you install relevant trust profile) you get an error about App Transport Security requiring the use of a secure connection when it tries to download the SCEP profile.... still investigating on ways to get this working on a High Sierra box - if you upgrade the OS and server app to mojave it makes no difference in my testing - you need to build the box from the ground up using mojave for it to work...
Upgrading to 5.7.1 may not be an option for some people though, there is a bug in 5.7.1 where VPP won't sync. And the only option to fix this is to unbind and rebind active directory. Which will remove all user profile assignments.
Profile Manager has been the bane of my existence
FYI ios 12 devices can't be enrolled with profilemangers without a valid FullyqualifiedName
