Endpoint Security Complete

 View Only
Expand all | Collapse all

MMS enrollment error

  • 1.  MMS enrollment error

    Posted Nov 14, 2011 02:22 PM

    Has anyone come up with a resolution for this?  I am having the EXACT same issue. 

     

    Safari could not install a profile due to an unknown error.

     

    I have recreated my server 3 times, followed brian fromm's video's to a T and have my certificate in the form of com.apple.mgmt.mycompanyname

     

    It's the same error everytime,  it's driving me nuts.

     

    Thanks,

    Patrick



  • 2.  RE: MMS enrollment error

    Posted Nov 14, 2011 02:23 PM

    I've split this off as a new discussion so that we can solve one issue at a time, since there are so many things to check in MMS 7.1.

    Can you share the exact error message?  Are you using the Apple app or an in-house app?  What version of iOS is the device you're enrolling (try a 4.x device and a 5.x device)?  Are you enrolling over HTTP or HTTPS?  Is the IP address specified in the override setting publicly accessible?



  • 3.  RE: MMS enrollment error

    Posted Nov 14, 2011 02:40 PM

    Error is.

     

    Safari Could not install a profile due to an unknown error.

     

    This is with the apple app.   This is a ios version 5.1 device.   I am enrolling over http  and I have also specified the ip address in the override settings.

     

    It is not a publicly accessible IP address,   I have this all setup on a test environment which has no outside internet access.  The ipad connects wirelessly to the router which is used to provide network access to the domain controller and the altiris servers.

     

    Thanks,



  • 4.  RE: MMS enrollment error

    Posted Nov 15, 2011 11:57 AM

    I have gotten furhter now.

     

    Figured out for ios 5.0 and up,  the enrollment website needs to be https://serveraddress/mobileenrollment/symc-iosenroll.aspx

    I get to the install profile screen but when I click install i get this error now.

    Profile failed to install

     

    The profile "MDM Enrollment"  Could not be installed.



  • 5.  RE: MMS enrollment error

    Posted Nov 15, 2011 01:22 PM

    http://www.symantec.com/business/support/index?page=content&id=TECH173907

     

    Looks like this is a problem with sp1 for windows server 2008 mr2.  Very nice symantec.



  • 6.  RE: MMS enrollment error

    Posted Nov 15, 2011 03:52 PM

    Sorry, didn't get a subscription notice from Connect, so didn't see this until now.  But yes, iOS 5 will require HTTPS, and as you've probably read in the documentation, you should NOT install SP1 for Windows Server 2008 R2.



  • 7.  RE: MMS enrollment error

    Posted Nov 18, 2011 12:33 PM

    Actually, I've got it straight from the PM that 2008 R2 SP1 is supported.  You will need to run this fix, however:
    http://www.symantec.com/docs/HOWTO59804

    I also had to run 'iisreset' and then restart the Symantec Mobile Management Service Agent.

    If you perform these steps, do you find that SP1 is functional in your environment?



  • 8.  RE: MMS enrollment error

    Posted Nov 25, 2011 05:07 AM

    Hello!

    I made a test environment with newest Symantec Mobile Manager MR1. Didnt installed SP1 for Windows 2008 R2. With SP1 had problem with installing the profile. Now with new environment(new install of windows) i have problem with connection. When going to Agent, enrolling i got message that Profile installation failed and network connection error occurred. I have iOS 5.0.1. Server is pinging. No errors in Altiris Log Viewer found.

    With 4.3.5 everything was fine.

    I see that your application is a bit buged... 



  • 9.  RE: MMS enrollment error

    Posted Dec 05, 2011 01:52 PM

    I tried this,  but it did not resolve the issue.  When I installed windows server 2008 I used the install with the built in SP1 so I can not uninstall SP1.  The only solution I see is starting completely over....which I don't have time to do at the moment. 



  • 10.  RE: MMS enrollment error

    Posted Dec 05, 2011 05:11 PM

    You mean 2008 R2, correct?



  • 11.  RE: MMS enrollment error

    Posted Dec 06, 2011 07:26 AM

    Yes



  • 12.  RE: MMS enrollment error

    Posted Dec 06, 2011 01:07 PM

    Are you deleting the certificates from the iOS device (Settings > General > Profile) prior to re-attempting enrollment?  If you delete the certs that are present, and then reattempt enrollment, it should succeed.  (If I read correctly above, you're using override and checking HTTPS, going to an externally-available FQDN that has an externally-signed SSL certificate, and selecting port 443.)



  • 13.  RE: MMS enrollment error

    Posted Dec 06, 2011 01:24 PM

    You are correct sir.  But there are no certificates ever installed on the iOS devices.