After upgrading macOS server to 5.7.1 new iOS devices cannot get the configuration downloaded from the server. I am still able to manage existing devices. When I press Next in Remote Management step, quickly it says "The configuration for your iPad could not be downloaded from OrganizationName. cancelled". It failed when I use Apple Configurator as well. Any help?
iMac, macOS Mojave (10.14), MacOS server
I created a CSR from the server and created a signed certificate with a free Third party provider (letsencrypt). Then added the certificate to the server and assigned it. I am not sure if it is mandatorily a third party signed.
I created a CSR from the server and created a signed certificate with a free Third party provider (letsencrypt). Then added the certificate to the server and assigned it. I am not sure if it is mandatorily a third party signed.
It's hard to know if those indicate a problem or not. There are only two clients there, so it would be interesting to know if those two devices are having difficulty talking to the PM server. It appears that the clients are closing the connection unexpectedly. It *could* be related to an expired device identity on those two devices. You'd have to find them and look at the certificates shown under the Remote Management profile.
If the device identities are expired, you will need to re-enroll these devices to get them working with Profile Manager again. (There was a bug in a few versions of Profile Manager prior to 5.7.1 where PM did not automatically renew device identities before they expired and you might have hit this before upgrading. The problem appears to be fixed in 5.7.1, but it can't retroactively fix the devices that already have expired identities.)
The only other thing that happened to me on 5.7.1, the codesigning cert reverted to nothing. I had to set it to the selfsigned one before I could enroll devices again
This has happened to me on the older Macos server and the fully updated one. Sometimes if an iOS device sits around to long the DEP config "expires".
On the devices that fail, clicking refresh or change a setting for the DEP group or device to update it. Then wipe the effected IOS device and hope that it pulls the new DEP config.
The nuclear option is to roll it back to 5.6.3, if you have a local time machine backup.
Restore macOS Server from a Time Machine backup - Apple Support
Take a look at the end of the log file /Library/Logs/ProfileManager/dmDeviceService.log while you attempt this again. Anything logged there would be very helpful in debugging this. (Paste it in a reply here if you don't know what it means.)
OK, then this definitely sounds like a TLS issue. Watch the log file at /var/log/apache2/service_proxy_error.log as the device tries to connect. That might give clues as to how the TLS handshake is failing.
I can't enroll devices my on 5.6.3 myself with ios 12+ devices, but I get a different "network error" from dep enrollment and the my devices portal.
I also have a 5.7.1 server that can enroll ios 12+ devices that I have been pulling over from my broken 5.6.3 server. Until I can do a full migration to a paid/free MDM provider(moysle.com) for schools.
The only difference between my two servers is the 5.7.1 has a real web address(fqdn) with a valid cert.
I am not sure if iOS 12+ or the MacOS server 5.7.1 upgrade caused this problem. When I try to enroll with configurator 2, I get "network error". I don't have a time machine backup for 5.6.3. As a work around, I am now using the configurator to supervise and then installing the profile manually. After restarting the device it goes to the home screen. The problem is that the DEP devices are also become similar to non-DEP (The remote management can be removed on the device). We need to manage only iOS devices and the major paid MDM services will be overkill for us. I am also, looking for a free/less expensive MDM services. In fact I was happy with Profile manager until this issue happened.
ββ+ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
0 | ββββββββββββββββββββββ+ββββββββββββββββββββββββββββββββββββββββββββ
| ErrorCode : 12085
| ErrorDomain : MCMDMErrorDomain
| LocalizedDescription : The activation lock bypass code has expired.
| USEnglishDescription : The activation lock bypass code has expired.
| ββββββββββββββββββββββ+ββββββββββββββββββββββββββββββββββββββββββββ
ββ+ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
0:: [18897] [2018/10/23 12:14:04.281] <10.100.5.242> Β«SQ11:MDMConnectHandler:ErrorΒ» -[MDMConnectHandler _handleError]: Task not found for UUID 3812E074-02DA-4BA4-A0EA-E3713DF1A059
0:: [18897] [2018/10/23 12:14:04.291] <10.100.5.242> Β«SQ11:MDMConnectHandler:ErrorΒ» processed request in 14.724ms
0:: [18897] [2018/10/23 12:14:04.438] <10.100.6.19> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» Status='Acknowledged' CommandUUID=B580BC38-AAD3-48E3-B731-E7F313F9793E
1:: [18897] [2018/10/23 12:14:04.440] <10.100.6.19> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» Found target iOS: <'C15-Student 1'[1319]>
0:: [18897] [2018/10/23 12:14:04.452] <10.100.6.19> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» Sending request 'ActivationLockBypassCode' as CommandUUID=2D4251EA-458B-46D1-B4DB-BB7C115676BD
0:: [18897] [2018/10/23 12:14:04.455] <10.100.6.19> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» processed request in 16.807ms
0:: [18897] [2018/10/23 12:14:04.745] <10.100.6.19> Β«SQ11:MDMConnectHandler:ErrorΒ» Status='Error' CommandUUID=2D4251EA-458B-46D1-B4DB-BB7C115676BD
1:: [18897] [2018/10/23 12:14:04.746] <10.100.6.19> Β«SQ11:MDMConnectHandler:ErrorΒ» Found target iOS: <'C15-Student 1'[1319]>
0:: [18897] [2018/10/23 12:14:04.748] <10.100.6.19> Β«SQ11:MDMConnectHandler:ErrorΒ» ErrorChain:
ββ+ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
0 | ββββββββββββββββββββββ+ββββββββββββββββββββββββββββββββββββββββββββ
| ErrorCode : 12085
| ErrorDomain : MCMDMErrorDomain
| LocalizedDescription : The activation lock bypass code has expired.
| USEnglishDescription : The activation lock bypass code has expired.
| ββββββββββββββββββββββ+ββββββββββββββββββββββββββββββββββββββββββββ
ββ+ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
0:: [18897] [2018/10/23 12:14:04.749] <10.100.6.19> Β«SQ11:MDMConnectHandler:ErrorΒ» -[MDMConnectHandler _handleError]: Task not found for UUID 2D4251EA-458B-46D1-B4DB-BB7C115676BD
0:: [18897] [2018/10/23 12:14:04.758] <10.100.6.19> Β«SQ11:MDMConnectHandler:ErrorΒ» processed request in 13.728ms
0:: [18897] [2018/10/23 12:20:03.684] <10.100.5.242> Β«SQ11:MDMConnectHandler:IdleΒ» Status='Idle'
1:: [18897] [2018/10/23 12:20:03.687] <10.100.5.242> Β«SQ11:MDMConnectHandler:IdleΒ» Found target iOS: <'C15-Student 6'[1335]>
0:: [18897] [2018/10/23 12:20:03.692] <10.100.5.242> Β«SQ11:MDMConnectHandler:IdleΒ» Sending request 'OSUpdateStatus' as CommandUUID=E4250145-040A-41E7-8185-3A49214FCA18
0:: [18897] [2018/10/23 12:20:03.695] <10.100.5.242> Β«SQ11:MDMConnectHandler:IdleΒ» processed request in 10.911ms
0:: [18897] [2018/10/23 12:20:04.047] <10.100.5.242> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» Status='Acknowledged' CommandUUID=E4250145-040A-41E7-8185-3A49214FCA18
1:: [18897] [2018/10/23 12:20:04.049] <10.100.5.242> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» Found target iOS: <'C15-Student 6'[1335]>
0:: [18897] [2018/10/23 12:20:04.056] <10.100.5.242> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» Sending request 'DeviceInformation' as CommandUUID=DBFA341D-B0C3-4231-92E9-568A30F096D9
0:: [18897] [2018/10/23 12:20:04.059] <10.100.5.242> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» processed request in 12.127ms
0:: [18897] [2018/10/23 12:20:04.297] <10.100.6.19> Β«SQ11:MDMConnectHandler:IdleΒ» Status='Idle'
1:: [18897] [2018/10/23 12:20:04.299] <10.100.6.19> Β«SQ11:MDMConnectHandler:IdleΒ» Found target iOS: <'C15-Student 1'[1319]>
0:: [18897] [2018/10/23 12:20:04.304] <10.100.6.19> Β«SQ11:MDMConnectHandler:IdleΒ» Sending request 'OSUpdateStatus' as CommandUUID=333006DD-883E-4685-ACA8-F817704A83DD
0:: [18897] [2018/10/23 12:20:04.307] <10.100.6.19> Β«SQ11:MDMConnectHandler:IdleΒ» processed request in 9.979ms
0:: [18897] [2018/10/23 12:20:04.580] <10.100.6.19> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» Status='Acknowledged' CommandUUID=333006DD-883E-4685-ACA8-F817704A83DD
1:: [18897] [2018/10/23 12:20:04.582] <10.100.6.19> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» Found target iOS: <'C15-Student 1'[1319]>
0:: [18897] [2018/10/23 12:20:04.590] <10.100.6.19> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» Sending request 'DeviceInformation' as CommandUUID=1637B768-9ECA-470B-8AEC-E67558EE8C0C
0:: [18897] [2018/10/23 12:20:04.593] <10.100.6.19> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» processed request in 12.864ms
0:: [18897] [2018/10/23 12:20:05.017] <10.100.5.242> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» Status='Acknowledged' CommandUUID=DBFA341D-B0C3-4231-92E9-568A30F096D9
1:: [18897] [2018/10/23 12:20:05.019] <10.100.5.242> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» Found target iOS: <'C15-Student 6'[1335]>
0:: [18897] [2018/10/23 12:20:05.032] <10.100.5.242> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» Sending request 'ActivationLockBypassCode' as CommandUUID=2CDE052A-E92E-4444-AED1-9CA4300E7A66
0:: [18897] [2018/10/23 12:20:05.035] <10.100.5.242> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» processed request in 18.232ms
0:: [18897] [2018/10/23 12:20:05.276] <10.100.5.242> Β«SQ11:MDMConnectHandler:ErrorΒ» Status='Error' CommandUUID=2CDE052A-E92E-4444-AED1-9CA4300E7A66
1:: [18897] [2018/10/23 12:20:05.278] <10.100.5.242> Β«SQ11:MDMConnectHandler:ErrorΒ» Found target iOS: <'C15-Student 6'[1335]>
0:: [18897] [2018/10/23 12:20:05.280] <10.100.5.242> Β«SQ11:MDMConnectHandler:ErrorΒ» ErrorChain:
ββ+ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
0 | ββββββββββββββββββββββ+ββββββββββββββββββββββββββββββββββββββββββββ
| ErrorCode : 12085
| ErrorDomain : MCMDMErrorDomain
| LocalizedDescription : The activation lock bypass code has expired.
| USEnglishDescription : The activation lock bypass code has expired.
| ββββββββββββββββββββββ+ββββββββββββββββββββββββββββββββββββββββββββ
ββ+ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
0:: [18897] [2018/10/23 12:20:05.280] <10.100.5.242> Β«SQ11:MDMConnectHandler:ErrorΒ» -[MDMConnectHandler _handleError]: Task not found for UUID 2CDE052A-E92E-4444-AED1-9CA4300E7A66
0:: [18897] [2018/10/23 12:20:05.290] <10.100.5.242> Β«SQ11:MDMConnectHandler:ErrorΒ» processed request in 13.613ms
0:: [18897] [2018/10/23 12:20:05.544] <10.100.6.19> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» Status='Acknowledged' CommandUUID=1637B768-9ECA-470B-8AEC-E67558EE8C0C
1:: [18897] [2018/10/23 12:20:05.546] <10.100.6.19> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» Found target iOS: <'C15-Student 1'[1319]>
0:: [18897] [2018/10/23 12:20:05.557] <10.100.6.19> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» Sending request 'ActivationLockBypassCode' as CommandUUID=D4105D17-5E1A-4841-BF9A-E546B851E2EE
0:: [18897] [2018/10/23 12:20:05.559] <10.100.6.19> Β«SQ11:MDMConnectHandler:AcknowledgedΒ» processed request in 15.385ms
0:: [18897] [2018/10/23 12:20:05.796] <10.100.6.19> Β«SQ11:MDMConnectHandler:ErrorΒ» Status='Error' CommandUUID=D4105D17-5E1A-4841-BF9A-E546B851E2EE
1:: [18897] [2018/10/23 12:20:05.798] <10.100.6.19> Β«SQ11:MDMConnectHandler:ErrorΒ» Found target iOS: <'C15-Student 1'[1319]>
0:: [18897] [2018/10/23 12:20:05.799] <10.100.6.19> Β«SQ11:MDMConnectHandler:ErrorΒ» ErrorChain:
ββ+ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
0 | ββββββββββββββββββββββ+ββββββββββββββββββββββββββββββββββββββββββββ
| ErrorCode : 12085
| ErrorDomain : MCMDMErrorDomain
| LocalizedDescription : The activation lock bypass code has expired.
| USEnglishDescription : The activation lock bypass code has expired.
| ββββββββββββββββββββββ+ββββββββββββββββββββββββββββββββββββββββββββ
ββ+ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
0:: [18897] [2018/10/23 12:20:05.800] <10.100.6.19> Β«SQ11:MDMConnectHandler:ErrorΒ» -[MDMConnectHandler _handleError]: Task not found for UUID D4105D17-5E1A-4841-BF9A-E546B851E2EE
0:: [18897] [2018/10/23 12:20:05.810] <10.100.6.19> Β«SQ11:MDMConnectHandler:ErrorΒ» processed request in 14.061ms
defiantly check out Pricing - Mosyle Manager MDM , its free for basic mdm stuff for schools.
Nothing happens in dmDeviceService.log when I tried to install the profile. It seems the new device cannot even establish the connection. There are logs for existing devices, I tried locating the logs for this device with the IP address. The error on device is "The configuration for your iPad could not be downloaded from Organization. cancelled"
It didn't helpπ. They are all new DEP device and never configured or added to any device groups in profile manager. Only place holders available in Profile manager. I tried removing the placeholders from a group and re-added them. Also tried reassigning them from our School Manager DEP account.
Yes, log messages below-
[Thu Oct 25 07:55:03.372531 2018] [ssl:info] [pid 10985] [client 10.100.6.218:56834] AH01964: Connection to child 11 established (server imac:443)
[Thu Oct 25 07:55:03.461008 2018] [ssl:info] [pid 10985] [client 10.100.6.218:56834] AH01998: Connection closed to child 11 with abortive shutdown (server imac:443)
Can you give instructions on how you fixed this as I'm having the same issue? The new signed certificate created, is it signed by a third party?
Thanks
MacOS server 5.7.1 profile manager error
