Skip to main content
Solved

Enrolling with Management Server Failed

  • April 19, 2023
  • 5 replies
  • 102 views
K
Forum|alt.badge.img+5

Hello Jamf Community, 

We are currently in the process of setting up an on-premises Jamf server but have encountered an error. The computer begins to enroll with the MDM after entering the user credentials in Remote Management, then retrieves enrollment profile, begins to install enrollment profile, then gives an error. 

The error: 

Enrolling with management server failed. 

Unable to contact the SCEP server at https://our-server-domain.local:8443//CA/SCEP 

 

Has anyone experienced this issue, or know what is causing it and how to fix it? Also, I am not sure why it is inserting two forward slashes after the port and before CA: 8443//CA.

 

Any and all help is greatly appreciated.

 

Thank you.

Best answer by Knight_Owl

Found the cause of the issue. It was an incorrectly configured CA Certificate for the Web Server.

    5 replies

    AJPinto
    Forum|alt.badge.img+26
    • AJPinto
    • Legendary Contributor
    • April 19, 2023

    Have you made sure all the proper ports are open for a JAMF Environment? Assuming your datacenter is setup for least privileged access and the sever is setup correctly I'd start with network related issue.

     

    K
    Forum|alt.badge.img+5
    • Knight_Owl
    • Author
    • New Contributor
    • April 20, 2023

    Have you made sure all the proper ports are open for a JAMF Environment? Assuming your datacenter is setup for least privileged access and the sever is setup correctly I'd start with network related issue.

     


    Hi AJPinto,

    Thanks for the reply. Yes, we have opened the necessary ports and IP ranges. An update to this post. I tried to enroll it using the web enroll, to check if that gave a different error, which it did.

    The Error for Web Enroll:
    Profile Installation failed.

    The certificate for this server is invalid. You might be connecting to a server that is pretending to be "hostname.domain.local" which could put your confidential information at risk. If the server's certificate cannot be verified using a trusted root authority, you must install the "Trust Profile" for the server.

     

    So, perhaps this is why the Pre-Stage enrollment is not working as well. Question is, how do I correct this? 

    For the Apache web server, we are using our AD as the CA, but we are also using the built-in CA of Jamf Pro. Could this be creating a conflict? Do I need to push the root CA of AD with the profile installation? Also, these computers were added to Apple School Manager using Apple Configurator on the iPhone. Do I need to add the certificates on Apple Configurator before I added them to ASM? 

    Still researching. I appreciate any feedback on this. Thank you.

    K
    Forum|alt.badge.img+5
    • Knight_Owl
    • Author
    • New Contributor
    • Answer
    • April 24, 2023

    Found the cause of the issue. It was an incorrectly configured CA Certificate for the Web Server.

    Z
    Forum|alt.badge.img
    • zhamza
    • New Contributor
    • May 7, 2024

    Can you explain how it was incorrectly configured?  Hitting this same issue. 

    Davidmenk3
    Forum|alt.badge.img+1
    • Davidmenk3
    • New Contributor
    • October 8, 2024

    The error message "Enrolling with Management Server Failed" usually indicates a problem with the connection to the server management system. This could be due to network issues or misconfigurations. If you continue to face this problem, consider reaching out to HostNoc for assistance with server management to help resolve the issue.

    Terms & ConditionsCookie settingsAccessibility statement