iOS enrollment, Login failed: Authentication failure

Article:TECH191259  |  Created: 2012-06-19  |  Updated: 2013-09-09  |  Article URL
Article Type
Technical Solution



Authentication check is enabled for the agent\device rollout.
The rollout fails during authentication. If untick Enable Authentication Check, the rollout to the device works correctly.


Login failes: Authentication failure


Symantec Management Console 7.1.8280
Altiris Notification Server Version 7.1
Symantec Mobile Management Solution SP1      7.1.2154


1. Check the values in the Mobile Management Server Settings under the Enrollment tab.
   As an example if the environment looks like this:
         - Notification Server with Mobile Management  Solution    =
          - Active Directory Server \ LDAP Server                         =

   The necessary entries would be these:

     example entries
    Do not enter the IP address for the AD/LDAP Server.
    If a child/parent domain is involve might enter something like: symtest.Ireland.Symantec for the Domain.
    The value for the Extension does not contain the “.”.

2.     If the password contains an ampersand "&" character, authentication may fail.
     < A ticket has been filed with development about this issue. >
     < This issue will be fixed in the Symantec Mobile Management 7.2 release >

3.     Check if IIS SSL certificate match the name of the SMM Server.
     iOS Agent enrollment fails with a "Login failed - Authentication failure" message (TECH188822)

4.     Leave the value for Allowed Groups blank if you want to authenticate across domains.
     Mobile Management Solution 7.1 SP1 is unable to authenticate across domains if there is an entry in the Allowed Groups field. 
     < A ticket has been filed with development about this issue. >

Article URL

Terms of use for this information are found in Legal Notices