Skip to main content
Solved

Invalid MDM Profile during enrollment

  • April 25, 2018
  • 4 replies
  • 64 views

Forum|alt.badge.img+5

We usually enroll our iPads through DEP, but these were purchased through the Apple outlet and Apple said they are not eligible for DEP enrollment because of that. (They're claiming they can't put the order under our customer number for DEP to work) So I have tried enrolling them with the Apple Configurator and with User Initiated Enrollment. In both situations, I get an error saying the MDM Profile is Invalid.

I checked the date and time and trusted the certificate in Settings->About->Certificate Trust Settings. I also followed the instructions here: https://www.jamf.com/jamf-nation/articles/192/mobile-device-enrollment-error-invalid-profile-or-invalid-certificate and restarted tomcat. Nothing I have found has worked. The Configurator says Profile Installation Failed - Invalid Profile [MCInstallationErrorDomain - 0xFA1 (40010].

Does anyone have any ideas?

Best answer by jared_f

Instead of using User Initiated Enrollment, why not just enroll the devices into DEP with Apple Configurator 2 - there will be a 30 day period until the MDM profile becomes fully mandatory, but it seems that is what you are trying to achieve. Here is a guide I am sure you could adapt to your Jamf instance.

https://simplemdm.com/2017/09/28/ios-11-dep-apple-configurator-2-5/

4 replies

Forum|alt.badge.img+14
  • Valued Contributor
  • Answer
  • April 25, 2018

Instead of using User Initiated Enrollment, why not just enroll the devices into DEP with Apple Configurator 2 - there will be a 30 day period until the MDM profile becomes fully mandatory, but it seems that is what you are trying to achieve. Here is a guide I am sure you could adapt to your Jamf instance.

https://simplemdm.com/2017/09/28/ios-11-dep-apple-configurator-2-5/


Forum|alt.badge.img+5
  • Author
  • Contributor
  • April 26, 2018

I'll take a look. Thanks.


Forum|alt.badge.img+5
  • Author
  • Contributor
  • April 26, 2018

You're a god send. I was using an old version of Configurator and didn't know that was an option so I updated, tried it and it worked.


jamesandre
Forum|alt.badge.img+7
  • Contributor
  • April 26, 2018

I had the same error, but mine was a different issue. Basically, I just made a stupid mistake.

I had already use Apple Configurator to enrol some AppleTVs, I was using the AppleTV Blueprint to try and enrol some old iPhones and was getting that profile error.

I made a new enrolment profile in Jamf and a new Blueprint in Apple Configurator and everything worked.

Hopefully that is useful to someone.