Invalid MDM Profile during enrollment

[dnelson2813]

We usually enroll our iPads through DEP, but these were purchased through the Apple outlet and Apple said they are not eligible for DEP enrollment because of that. (They're claiming they can't put the order under our customer number for DEP to work) So I have tried enrolling them with the Apple Configurator and with User Initiated Enrollment. In both situations, I get an error saying the MDM Profile is Invalid.

I checked the date and time and trusted the certificate in Settings->About->Certificate Trust Settings. I also followed the instructions here: https://www.jamf.com/jamf-nation/articles/192/mobile-device-enrollment-error-invalid-profile-or-invalid-certificate and restarted tomcat. Nothing I have found has worked. The Configurator says Profile Installation Failed - Invalid Profile [MCInstallationErrorDomain - 0xFA1 (40010].

Does anyone have any ideas?

[jared_f · Accepted solution]

Instead of using User Initiated Enrollment, why not just enroll the devices into DEP with Apple Configurator 2 - there will be a 30 day period until the MDM profile becomes fully mandatory, but it seems that is what you are trying to achieve. Here is a guide I am sure you could adapt to your Jamf instance.

https://simplemdm.com/2017/09/28/ios-11-dep-apple-configurator-2-5/

[dnelson2813]

I'll take a look. Thanks.

[dnelson2813]

You're a god send. I was using an old version of Configurator and didn't know that was an option so I updated, tried it and it worked.

[jamesandre]

I had the same error, but mine was a different issue. Basically, I just made a stupid mistake.

I had already use Apple Configurator to enrol some AppleTVs, I was using the AppleTV Blueprint to try and enrol some old iPhones and was getting that profile error.

I made a new enrolment profile in Jamf and a new Blueprint in Apple Configurator and everything worked.

Hopefully that is useful to someone.