- Jamf Nation Community
- Products
- Jamf Pro
- Re: Certificates delivered through configuration p...
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 12-04-2015 09:22 AM
We use configuration profiles to deliver root certificates to our population (system keychain). On 10.11, possibly only 10.11.1, the configuration profile installs correctly, the certificates populate in the keychain, then some minutes later the certificates are gone despite the configuration profile still being there. This workflow has been fine on 10.10, anyone else seeing this?
Solved! Go to Solution.
1 ACCEPTED SOLUTION
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 12-09-2015 01:52 AM
Maybe OS X 10.11.2 resolves, as per: https://support.apple.com/en-us/HT205579
Resolves an issue where reinstalling a configuration profile containing a certificate payload causes the certificates to be removed instead of updated
7 REPLIES 7
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 12-04-2015 10:17 AM
I saw this same behavior after upgrading to 10.11 on some of our systems. Basically, I noticed after the upgrade, the wireless wouldn't work anymore and I kept getting a weird error that I needed to move closer to the AP. After doing a little research on my system I noticed that although the config profile was still there, the certs were not. Since that was the case, I couldn't simply re-run the policy to insert the certs because it conflicted with the profile that was already in place. I ended up re-writing the script to first check for the config profile and if found, remove it before trying to re-install the certs. So far this has worked without issue on all affected systems. I also haven't had a problem with them disappearing afterward.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 12-07-2015 12:44 AM
I have seen this on my test systems too... The reason for me was that the config profile which contained the certificates was installed twice (once at imaging and afterwards via policy). We cannot use APNs to deliver the profile, so manually installing is the only way for us.
Modifying the policy and installing the profile only once was the solution for me.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 12-07-2015 03:24 PM
I have also seen this behavior. Perhaps a bug in El Cap? What version of the JSS is everyone running? We are on 9.81, FWIW.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 12-07-2015 04:00 PM
Happened to me again today.
OS X 10.11.1 and JSS 9.81
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 12-09-2015 01:52 AM
Maybe OS X 10.11.2 resolves, as per: https://support.apple.com/en-us/HT205579
Resolves an issue where reinstalling a configuration profile containing a certificate payload causes the certificates to be removed instead of updated
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 12-09-2015 10:36 AM
Looks like 10.11.2 does indeed fix the issue, thats a relief
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 12-06-2017 05:09 AM
Its a product defect.
https://www.jamf.com/jamf-nation/discussions/24257/configuration-profiles-being-removed-and-reinstalled
