Machine needs restart before it will enroll with DEP

[MMartin1]

Hey,

Posted this a few times still not resolved. We currently enroll our MacOS devices via DEP. Its gets passed the Apple Setup and when it gets to the desktop the machine does not automatically enroll into our server or pull down Jamf binary. A simply restart of the machine fixes this issue. I've reset tomcat so many times. rebooted my server and change the push cert.

Please help me.

[hjcao]

Honestly, it can be a variety of issues. It could be the network, the firewall, etc, etc. How is everything set up?

Also, how long after assigning a machine to a prestige are you trying to set them up?

[MMartin1]

@hjcao

right now when i check the logs im gettting this

2019-02-28 08:48:01,190 [ERROR] [Thread-54 ] [PushNotificationUtility ] - Unable to send push notification com.jamfsoftware.jss.pushnotification.notifications.AppleMDMCheckInNotification@3740501a. Connection reset
2019-02-28 08:48:01,217 [ERROR] [neralPool-8] [APNSFeedbackConnection ] - IOException getting and entering feedback data: java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:210) at java.net.SocketInputStream.read(SocketInputStream.java:141) at sun.security.ssl.InputRecord.readFully(InputRecord.java:465) at sun.security.ssl.InputRecord.read(InputRecord.java:503) at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:975) at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1367) at sun.security.ssl.SSLSocketImpl.readDataRecord(SSLSocketImpl.java:931) at sun.security.ssl.AppInputStream.read(AppInputStream.java:105) at java.io.InputStream.read(InputStream.java:101) at org.apache.commons.io.IOUtils.copyLarge(IOUtils.java:1792) at org.apache.commons.io.IOUtils.copyLarge(IOUtils.java:1769) at org.apache.commons.io.IOUtils.copy(IOUtils.java:1744) at org.apache.commons.io.IOUtils.toByteArray(IOUtils.java:462) at com.jamfsoftware.jss.pushnotification.connection.APNSFeedbackConnection.getFeedbackData(APNSFeedbackConnection.java:34) at com.jamfsoftware.jss.pushnotification.connection.APNSFeedbackConnection.run(APNSFeedbackConnection.java:89) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:748)

[mbezzo]

I don't know that this is the issue, but it may be related. We've had timing issues when enrolling Mojave Macs without DEP (we don't use DEP for all devices yet) if we sort of speed through setup assistant and enroll. If we wait a few mins after completing the setup assistant and THEN enroll - no probs at all. It feels like something (certs?) are pushed from Apple on first login and those seem to take a few mins to arrive. Not sure how to deal with this relating to DEP - we can just wait 5 mins before enrolling, but that's not an option with DEP!

Good luck!

[hjcao]

@MMartin1

Have you tried running Wireshark? See if everything is reaching where it's supposed to?

Unable to send push notification com.jamfsoftware.jss.pushnotification.notifications.AppleMDMCheckInNotification@3740501a.

This could be a network issue. Also, have you downloaded the Push Diagnostics app from two canoes? That could also help you troubleshoot.
https://twocanoes.com/products/mac/push-diagnostics/