When trying to wipe and restore a couple of DEP/JSS managed iPads I am getting a message:
"The configuration for your iPad could not be downloaded from Long Road Sixth Form College"
Does anyone know what might cause this? There's no firewall between the iPad and our JSS, they're both on the same network, same subnet. Is there some Internet related thing that has to happen when downloading a configuration profile via DEP? We already set up our JSS with an externally-trusted HTTPS certificate, and it hasn't expired, so it shouldn't be that.
Dan Jackson (Senior ITServices Technician)
Long Road Sixth Form College
Good Morning Dan,
I am not sure it is the same issue, and you may have already tried it, but we had a lot of iPad minis display a similar message lately. We were able to remedy this issue with a software restore from iTunes. To be honest, I am not sure what the disconnect with the server was or what the restore cleared from the system, but I do know that it worked for us.
Good luck and I hope this helps you!
Jersey Shore Area School District
Yes I've tried the restore from iTunes method - holding down Home and Power to put it in recovery mode while connected to a Mac. It restored fine but then when the DEP kicks in during the setup process we get the "cancelled" error again. Unassigning the devices in Apple School Manager does allow us to get in, but then we can't enrol them to the JSS as non-DEP devices require that MDM profiles have to be removable, which we don't want.
I've tried to upgrade to 10.15.1 with no success as we are facing the same issue as you. Devices with iOS 13+ will not enroll and the ones already enrolled stop communicating with Jamf. Luckily we pushed out the profile to defer updates for 90 days but a few managed to update before we realized it was a problem. Currently talking with support over it.
Interesting. The pre-built cert from the primary server is automatically added to the prestage. We also have 3 JSS servers behind a load-balancer for device communication. The primary just handles APN communication. Does iOS 13/macOS 15 also need the the load-balancer cert added now? That wasn't the case before.
We are still working with Jamf over this issue. We actually have the same setup as lehmanp00 and are running into the same thing. It is strange, like lehmanp00 said, that the SSL cert would be needed in prestage as we never needed that before with the built in certs. I'll give that a try on our test prestage and see what happens.
So iOS 13 and MacOS 15 need new/extra attributes in your keys. So we need to generate a new cert, from our JSS system, to the load balancer with the new requirements.
My Network Manager and I are guessing Apple and JAMF are assuming most customers are using a 3rd-party cert, not the built-in certs, and didn't need to worry about this.