Failed to contact Mobile Device Management Server

[BVargas]

Hello! I am trying to implement a prestage enrollment on brand new computers at our university. However, I have been running into this error and have tried a few solutions to solve it. I have tried the following solutions to no avail:
1. I have refreshed the ASM token into the DEP,
2. I have tried initializing the process on different networks, both ethernet and wifi
3. I have included the University Private Root CA cert in the prestage enrollment (and then took it out after as a follow up test)

None have worked though. Any suggestions or thoughts would be appreciated!

[sdagley]

@BVargas Has your network group opened the required connections to Apple's servers? You'll find Apple tech notes HT201999, HT207516, and HT203609 useful info on what's needed.

[m_donovan]

I had a similar issue back in November and it turned out to be a duplicate DEP record in Jamf.

[Boyle]

Coincidently, we are having the same issue today as well. I have a case opened with Jamf support.

My tech mentioned to me that she was able to setup two iPads yesterday and I did confirm that we cannot setup an iPad today.

I did upgrade Jamf this morning from 10.11 to 10.11.1...not sure if that has anything to do with the issue...maybe Apple is having an issue.

We are going to try again tomorrow.

Chris

[a_simmons]

Yes I've been seeing this as well. It seems like its only happening on new devices.
I'm on Jamf 10.11

[ShaunRMiller83]

I've had this happen in a few of my past role.

I would make sure you are using a quality dongle (preferably MFI certified) if that is applicable. I've had dongles that were perfectly good in every other way fail during DEP.

If that is good during the Setup Assistant Press CTL+OPTION+CMD+T and see what your IP address is from terminal, and make sure you are getting a valid ip. You can also go to System Preferences after pressing that as well. Lastly make sure the subnet has the proper routing and ports open.

[Boyle]

So the issue for me is that we didn't have anchor certs attached to our pre-stages. (I had migrated to a new server, and I had to generate a new built in cert, but apparently, that never carried over to our pre-stages).

I had to export the Built cert from the PKI Certificates and upload the cert to all my pre-stages.

Now they are enrolling correctly.

Chris

[skhublall]

@Boyle This worked for me! Thank you!