Endpoint Security Complete

I'm trying to install Mobile Management 7.2 in a VM environment but I cannot enroll a device as I keep on geting the error "Cannot Install Profile" "Safari could not install a profile due to an unknown error."

My environment are as follows:

Win 2008 R2 Ent Domain Controller

Win 2008 R2 Ent CA with SCEP and NDES not using SSL

Win 2008 R2 Std SMP with MDM

Win 2008 R2 Std MMS (Site Server)

I have tried an iPAD 3 with iOS 5.1.1 or an iPhone 4 with iOS 5.1.1

You cannot enroll an iOS 5 device without SSL.  Is your MMS server using HTTPS?  If so, what certificate are you using?  How are you deploying that SSL certificate (if self-signed) to the device during enrollment?

See here for details on using SSL in SMM for iOS:
http://www.symantec.com/docs/HOWTO74478

Despite the SSL requirement, if you are forcing IIS to use SSL, certain internal communication between the infrastructure pieces will fail.  Be sure to resolve this:
http://www.symantec.com/docs/TECH178752

You could also try running the pre-requisite check utility:
http://www.symantec.com/docs/HOWTO77182

After all these steps, be sure to delete any profiles on the device (Settings > General > Profiles) and then reattempt enrollment.  If it still fails, can you upload the device logs, viewable using XCode or IPCU?

I had setup a server recently and encountered the same error. It was due to incorrect APNS certificate and a settings.

You may want to check the following items:

- use the correct APNS certificate.

- In Altiris Console, go to Mobile Management > Settings > iOS MDM Enrollment Configuration and make sure that the Push Certificate Subject had been enterred correctly. The format should be com.example.example.example. You should be able to locate it in the APNS certificate's subject.

Cheers~

- check APNS settings (case sensitive)
- check if UUID of the device is included to provided profile?

Look like as the next steps to me as well.
 

Unfortunately, the error message you are getting is generic and there are multiple reasons why the error could be occurring. I would recommend downloading the iPhone Configuration Utility from Apple (http://support.apple.com/kb/DL1466) and then switching to the console while attempting the enrollment.

This will show you the exact reason that the enrollment is failing. The following KB article will show you how to use the utility to firstly verify that your SCEP server is functioning correct:

http://www.symantec.com/docs/HOWTO66281

This tool really is a god send for troubleshooting enrollment utilities.

Once you see what error is occurring using the iPhone Configuration Utility post here and we can provide some additional assistance.