Skip to main content
Question

Issues with Automated DEP/MDM Server Certificates

  • February 22, 2022
  • 2 replies
  • 95 views

Forum|alt.badge.img+1

Hello - 

I am working on configuring the Automated DEP and enrollment process for our new computers - We have our Jamf Instance connected with the Apple Business Manager MDM, and I can see the computer serial numbers in Jamf and Assigned to the Pre-Stage Enrollment Scope. 

 

When turning on the computers, during activation it recognizes that it's a Managed Device, but then it gets the following error when downloading the enrollment profile,  "Enrolling with Management Server Failed; The server certificate chain for your organization's MDM server was not properly set up." 

 

I followed all the steps in Integrating with Automated Device Enrollment and even deleted the old MDM server and re-set up a whole new MDM connection with Apple's business Manager in case I overlooked a step.. Is there another section or configuration I am missing? 

 

I was able to do a user-initiated enrollment and that worked fine - Not sure what certificate issue is causing the DEP to fail 

2 replies

Forum|alt.badge.img+14
  • Honored Contributor
  • February 22, 2022

This sounds like more of an SSL cert chain issue, rather than an ABM/ADE configuration.

What does openssl say:

openssl s_client -showcerts -connect your.jss.url:8443

mm2270
Forum|alt.badge.img+24
  • Legendary Contributor
  • February 23, 2022

Agreed with @jtrant. When I've seen this it usually came down to a certificate issue on the Jamf server that was not properly trusted as an example.