Posted on 09-14-2012 10:25 AM
Hi guys
I'm setting up configuration profiles for the first time and followed things here to get my jss setup:
https://jamfnation.jamfsoftware.com/article.html?id=111
The mdm is showing in Profiles preference pane but the machine in the jss keeps saying MDM Managed: No
I tried deleting the machine from the JSS and removing the JAMF framework and running recon again.
Has anyone else come across this?
Solved! Go to Solution.
Posted on 09-17-2012 12:59 PM
Shamefully I screwed up on certificates all ok
Posted on 09-14-2012 03:29 PM
I've seen this a couple of times on Linux installs. Can you confirm your configuration?
Sometimes the answer is 'wait 24 hours' and it magically works. I don't have a root cause at the moment.
- Justin
Posted on 09-14-2012 05:05 PM
I had a terrible time with this at first as well. There are quite a few potential problems.
On the client computer, try to run "sudo jamf enroll". If it's still not managed, check the logs on your client computer. It should give some indication as to where it's failing.
Your server needs to have: - "Certificate Based-Communication" enabled - "Enable Push Notifications for OS X v10.7 or later clients" enabled - a SCEP-enabled Certificate Authority - a valid Push Notification Certificate
If you have all of these things and it's still not working, try renewing your CA certificate and then restarting Tomcat. I'm not sure if you would need to, but it might also help to renew your APN certificate.
Posted on 09-14-2012 09:19 PM
Thanks guys I think I will wait until Monday. I don't think I have SCEP-enabled Certificate Authority. But I'm not doing any iOS stuff.
Posted on 09-15-2012 11:59 AM
If you are using the built-in CA, it is SCEP enabled. Even though you aren't doing any iOS management, Lion and Mountain Lion's configuration profiles are being handled in the same way. They both use APNs and both need SCEP-enabled CAs.
Posted on 09-17-2012 12:59 PM
Shamefully I screwed up on certificates all ok