Posted on 03-29-2017 11:46 AM
My MDM Profile fails when I try to install it on an iPad Air with iOS 10.3. When I install it on a non iOS 10.3, it works. Any suggestions?
Posted on 03-29-2017 04:56 PM
You could be running into this issue if you're running 9.98:
http://docs.jamf.com/9.98/casper-suite/release-notes/Known_Issues.html
Beginning with iOS 10.3, during user-initiated enrollment of a device, the MDM profile is unable to be installed if the device does not trust the JSS built-in certificate authority (CA) signed Tomcat SSL certificate. This is also true of any Tomcat SSL certificates that are self-signed or issued from a CA that the device does not trust by default. In previous versions of iOS, installing the CA certificate during enrollment caused the device to trust the CA but this is no longer the case. This is the result of intended behavior and will not be resolved.
To manually trust the CA certificate installed during enrollment on the iOS device, go to Settings > About > Certificate Trust Settings.
For a list of trusted certificates for iOS devices, see the following Apple Knowledge Base article: https://support.apple.com/en-us/HT204132
Posted on 04-05-2017 02:40 PM
I had a very similar issue if not the same. I had to delete the Safari cache and always allow cookies to get the MDM to install. The above steps from JAMF didn't work for me.
Posted on 04-06-2017 12:11 AM
I came across this today - I'm assuming that this feature will make its way into macOS eventually?
So the ultimate fix would be to stop using self signed certificates altogether?
Posted on 05-16-2017 10:59 AM
Antzinoz's steps worked for me. I think the trick is before you go to install the MDM profile (right after you install the certificate) hop over to settings, toggle the switch in that About-Trust Certificates area, then hop back to safari and finish the MDM installation. This worked perfectly for me...
Posted on 07-06-2017 02:28 PM
Antzinoz's steps also worked for me. Thanks!