Posted on 06-11-2019 04:51 PM
I'm not sure if I should be too concerned with this issue as 10.15 is still beta, but enrolling a freshly installed 10.15 beta onto a MacBook Air produces a "Enrolling with managment server failed. The server certificate chain for your organization's MDM server was not properly set up" error. This doesn't occur with the same Mac restored with Mojave.
Has anyone else had this issue with 10.15?
Posted on 06-11-2019 05:07 PM
I have not, however, I am in the beta program testing with the most current build of Jamf Pro..10.13
Posted on 06-11-2019 05:26 PM
Posted on 06-12-2019 09:54 AM
I saw this once before in our environment and it turned out to be a jss build that did not support the OS. Simple fix, updated jss and voila the beta worked after that.
Posted on 06-12-2019 11:25 AM
We have Jamf Pro on-prem 10.12.0-t1555503901 and with our default production Prestage enrollment we do not see this error when enrolling an fresh macOS Catalina 10.15 Beta 1.
Some things don't work like enabling Filevault, but this will be fixed with Jamf Pro 10.13/14 i assume.
Do you attach some certificates in your prestage enrollment? Because per 10.15 TLS requirements has changed so maybe one of your certs does not meet the new requirements? see this article. https://support.apple.com/en-us/HT210176
Posted on 06-12-2019 11:35 AM
I would investigate the FileVault issue more...
I think FileVault is going to require user approval to enable. There are some Rich Trouton WWDC notes in the developer forum and this WWDC video @ 29:26.
Posted on 06-12-2019 11:56 AM
Do you know if your instance allows beta? In configuration profiles, you can see if you have a config payload that allows Software Updates, within it, it should allow you (or not allow you to) install beta updates
Posted on 06-13-2019 08:09 AM
Posted on 06-13-2019 08:28 AM
@gachowski You are looking for the 2019 video :)
Posted on 06-13-2019 08:59 AM
@zinkotheclown Alright, is your JSS cert Self Signed our generated by one of your CA's? perhaps one of the certificates is missing or got expired? so the chain is not complete anymore?
Try enrolling the device and check your JSS logs
Posted on 06-13-2019 09:12 AM
@ txhaflaire Our cert is self signed. I can enroll devices pre 10.15 fine and nothing seems to have expired.
Posted on 06-13-2019 09:48 AM