Skip to main content
Solved

Problem Contacting Apple Services DEP

  • April 22, 2016
  • 42 replies
  • 331 views

Forum|alt.badge.img+5

I am trying to set up DEP on our JSS and when ever I get to the point where I have to upload the server token file, I get the error "Problem contacting Apple services"

I've redownloaded the private key, deleted and recreated the Management server on Apple's side and tried again but always this error. Anyone got any idea why?

Best answer by Daikonbuu

With the help of JAMF support we just figured out the issue. The token was being denied by Apple due to the time on our server not being correct. We run our JSS on ubuntu so I had to set a NTP server, and force it to update the time. After this the token uploaded as it should.

Without JAMF support on this one I would have been at this for who knows how long.

42 replies

Forum|alt.badge.img+13
  • Contributor
  • April 22, 2016

Check your firewall. Review the DEP documentation and make sure all the necessary ports aren't blocked.


Forum|alt.badge.img+5
  • Author
  • New Contributor
  • April 22, 2016

This makes the most sense and was my thought too. But other than 443 for https listed as a requirement, I cannot find any mention of other ports that need to be open.


MischaB
Forum|alt.badge.img+17
  • Employee
  • April 26, 2016

@besteves Did you solve this or do you still have the "Problem contacting Apple services" error
we also get this one now so i am curious.


Forum|alt.badge.img+13
  • Valued Contributor
  • April 26, 2016

Do you have a proxy in place?


Forum|alt.badge.img+5
  • Author
  • New Contributor
  • Answer
  • April 28, 2016

With the help of JAMF support we just figured out the issue. The token was being denied by Apple due to the time on our server not being correct. We run our JSS on ubuntu so I had to set a NTP server, and force it to update the time. After this the token uploaded as it should.

Without JAMF support on this one I would have been at this for who knows how long.


MischaB
Forum|alt.badge.img+17
  • Employee
  • April 29, 2016

Nive to know about the time server, but in our case the next day we could import the DEP token without a problem so i think Apple had a error or something.


Forum|alt.badge.img+21
  • Valued Contributor
  • April 29, 2016

This could also fail if your JSS site certificate is expired.


Forum|alt.badge.img+3
  • New Contributor
  • June 14, 2016

I have also come across this.

Our JSS is behind Microsoft TMG server (not for long) but after running logs on traffic during the Upload I couldnt actually see a specific denial to an outbound address.
Does anyone know the specif IP or URL this process needs to communicate to?


Forum|alt.badge.img+3
  • New Contributor
  • July 18, 2016

@besteves, we had the same issue. Updating the date/time on the JSS resolved this problem for us.


Forum|alt.badge.img+6
  • Contributor
  • October 14, 2016

SOLVED Posted: 4/28/16 at 5:10 PM by besteves

This solution worked for me - server was 5 minutes out! Thanks!


Andreas_Schenk
Forum|alt.badge.img+8

We had just seen the same issue after a clean and fresh install.
In our case we solved it by installing Oracle Java on the JSS instead of open JDK.

With OpenJDK the JSS could not contact Apple Servers for DEP and VPP, after changing to Oracle Java, everything started working.
Might be a 9.98 product issue...


Forum|alt.badge.img
  • New Contributor
  • May 31, 2017

We are running 9.98, the time on our server is correct, we are running Oracle Java, the fire wall is configured correctly per JAMF support, and this is a clean installation. However we get the problem contacting apple services error and can not configure DEP. Any other ideas?


Forum|alt.badge.img+3
  • New Contributor
  • June 26, 2017

I continue to have this issue. Did anyone come up with a confirmed resolution?


Forum|alt.badge.img+2
  • New Contributor
  • June 27, 2017

It seems that the DEP portal is "down" since a few hours


Forum|alt.badge.img+2
  • New Contributor
  • July 11, 2018

After a support call to JAMF Support and examining many support articles - we followed these steps to resolve:

  • Apple School Manager - "Get a new Token" from desired MDM Server

  • JAMF Pro - upload new "Server token file" Settings | Global Management | Device Enrollment Program

Once uploaded, errors went away and missing devices from ASM started populating in Pre-stage Enrolments.


Forum|alt.badge.img+4
  • Contributor
  • August 29, 2019

Running into this currently. ntpd is configured properly and the time on the server is accurate. Firewall certainly shouldn't be an issue given that it's 443. I've tried downloading the token from multiple different admin and device manager accounts in apple school manager.

hepl!


Forum|alt.badge.img+4
  • Contributor
  • September 7, 2019

seems like no one saw this or has an answer.


Forum|alt.badge.img+4
  • New Contributor
  • October 7, 2019

No answer, but we're currently experiencing this issue as well. I suspect it started when we shifted to daylight savings time about a week back - GMT/UTC+13. We do occasionally and unpredictably sneak a DEP sync or token update through, but not due to any changes on our end.


Forum|alt.badge.img+3
  • New Contributor
  • October 7, 2019

We have been noticing this too. 10.15.1. I'm not sure how long its been happening, but if we retry enough times we can get a new token to take. But I can't seem to sneak an ASM roster sync through at all.


Forum|alt.badge.img+3
  • New Contributor
  • October 7, 2019

Looks like this was our issue: https://macmule.com/2019/10/01/more-dep-sync-errors/

Sync is working after applying the fix.


Forum|alt.badge.img+1
  • New Contributor
  • December 10, 2019

This issue just crept up for me and my team, and I am looking at the macmule.com/2019/10/01/more-dep-sync-errors/ post, and am more lost than anything, and the problem is, I inherited this setup, and the last major update that was ran was to 10.15.1, and installed the prerequisite Amazon Corretto 11.0.4.11.1, and was running fine up until this afternoon. I noticed there was an update to 10.17.1 that was supposed to fix issues with EDU sync, but still nothing.

TIA
-Mark


Forum|alt.badge.img+26
  • Honored Contributor
  • December 10, 2019

@amityaccounts Sound like you are experiencing the same as being discussed here: https://www.jamf.com/jamf-nation/discussions/34219/dep-sync-failing

Sync failed. Awaiting next sync.

It is occurring for us too, as of today.


Forum|alt.badge.img+5

We have the DEP SYNC Issue as of today.


Forum|alt.badge.img+6
  • Contributor
  • December 11, 2019

same here. I noticed this started happening yesterday morning for us. I get "Problem contacting Apple Services" if I try to upload a new DEP token.


Forum|alt.badge.img+1
  • New Contributor
  • December 12, 2019

Same here running 10.15.1 on-prem.