Skip to main content

Hi all,

Our JSS Signing Certificate expired last month, and I have been unable to find how to either update it, or redeploy our MDM Profile. It's not our JSS Certificate Authority, but the Signing Certificate. Is there any documentation I should be looking for, or am I missing something obvious?

We are running 9.101.4, and it doesn't seem to have anything to do regarding user approved MDM (although that's its own can of worms).

Thanks

@rstasel both are running 10.14 and out in the field.

I have no idea what that top 'does not contain same push topic' message means!!!


yup, what @mainelysteve said. that does not contain same push topic looks like a different appleid was used to renew the push certificate.


@tcandela my suggestion at this point honestly if you haven't already. Open a ticket with Jamf support.


@boberito i did once. They're about as helpful as asking no one.


@tcandela yaaa.... :/


@tcandela Would definitely recommend opening a ticket in this case. Cause not sure we're going to be familiar with all the specific errors.

That first one though looks like APN Push Cert was renewed with different appleid. The second one though is more what I'm seeing (machines that aren't getting/respecting the Renew MDM command).


A few of our devices are not able to renew the MDM profile.  The failed commands shows:

Profile replacing MDM profile does not contain same ServerURL as original <MDMClientError:90>

We've only had one AppleID reserved for use with APN Push Certs.

Has anyone determined a resolution?