Unable to enroll ios12 devices on Profile Manager

I think there was a bug that borked open directory, previous profile manager servers required it(OD) but new install don't. And if previous devices were enrolled with open directory , and if open directory ever breaks you would have to re enroll devices to manage them again.

Both iOS and Profile Manager have required the use of HTTPS for MDM for ages.

The "attempt to connect to 127.0.0.1:3328 failed" is normal for Profile Manager, as that's an internal (i.e., stays on the server) HTTP (not HTTPS) reverse proxy request to a fixed pool of internal ruby processes. But Profile Manager doesn't always create all of these ruby processes. Apache logs this message when it tries to send a request to a port that doesn't have a ruby process listening on it. Apache continues to the next port in the pool and eventually hits one that does have a process that will handle the request. This is a not an error.

We changed from DEP to ASM without any issues.

We have just gotten set up with Apple School Manager and have Profile manager running on a local Mac, and are in the process of deploying our first 20 iOS 12 devices. Have been stuck on the same error as the original post. This discussion has been helpful and I will rename our local server to use all lower case to to hopefully avoid this bug.

We are using Apple School Manager. We still need Profile manager to manage the devices themselves. I'm at a loss to understand why Apple hasn't addressed this. It seems to be a very specific error which makes me think it can be easily addressed.

Not to deviate from the original topic too much...but since we are set up with Apple School Manager (ASM) - do we even need DEP? Part of the reason I found this thread was because DEP wasn't working for me yet. In the Profile Manager I see all the "temporarily" enrolled devices, which I added from ASM, but it seemed like DEP was required to finalize the enrollment...

Context: complete newbie to Apple Server. Using it in a small school setting.

Hey Ghilly82, have you renamed your host yet? I'm in a similar situation and would really like to prevent having to re-enroll 350 iPad devices. Does Apple have any official remediation guides based on this ios 12 bug?

Hi, I am having the same problem enrolling ios12 iPads onto profile manager (we don't use DEP) the error A network error has occurred. [MCInstallationErrorDomain – 0xFA1 (4001)].

After the error a "New Deice" is added with a placeholder but that is all.

My Server name has capitals for the beginning of the name but the hostname is all lowercase.

IOS 11.4 ipads all enroll fine and are working and receiving apps etc.

Is this the same or a differing problem (i.e. a lot of the posts mentioning DEP)

Thanks

I cannot enrol a IOS 12 device. In the server app/profile manager logs I am getting 401 unauthorised error message and a network error occurred on the IOS device.

my OS X servers hostname is all caps and hyphenated, if if rename to all lowercase not symbols then should it work?

should I expect any fallout like the other 14 devices failing to connect or the active directory intergration breaking?

If it is the case that an IOS device fails to enrol due to an “update!” that previously could handle caps and symbols now cannot then their recent fall in market share is completely justified.

Hi guys,

first i wish you all the best for 2019 !

I just uptaed my server to mojave and update mac server as well (5.7.1) and now i cant enroll my device

got this error: the scep server configuration is not supported

My server name is MDM (upper case), not sure if it linked or not.

it was working fine before the update

Thanks for your help

YV

Hi,

My trust profile can be installed without issue.

In device server log, i can see Playload display name : SCEP CA certificate for MDMs-Mac-mini.local

I think i have to put that in lower case but no idea where i can change that.

YV

Hi,

I got this error

MCSCEPErrorDomain

22004 Unsupported certificate configuration

Also in apache2 logs, under /service_proxy_error.log i got his

AH01630: client denied by server configuration: proxy:http://dmhttpd/mdm/scep

So clearly a certif issues but no clues how to fix it

Thanks

We are unable to enroll 2 new iOS12 iPads to Profile Manager. Host Name is and always has been all lowercase. This is on a Mac Mini running Sierra 10.12.6 and Server 5.2. Anyone find a permanent solution to this?