Unable to Enroll ATV 4 devices

[jpellet2]

We're unable to enroll any of our AppleTV 4 devices into Jamf. We have DEP setup, pre-stage enrollment configured and an enrollment profile configured. We've tried to upload the trust profile and the enrollment profile to the devices through Configurator and tried just the trust profile through Configurator. The devices will go through DEP, they will skip the right steps as we ask but then when they get to the Configuration screen and continue on, they all error.

The console logs for the devices report the following:

Sep 1 12:17:11 Apple-TV Setup(SetupAssistantTV)[106] <Notice>: Cloud configuration is available.
Sep 1 12:17:11 Apple-TV Setup(SetupAssistantTV)[106] <Notice>: FlowManager: Controller '<private>' does not support nearby setup.
Sep 1 12:17:11 Apple-TV Setup(TouchRemote)[106] <Notice>: -[TRNearbyDeviceAdvertiser stopAdvertising]_block_invoke Advertiser stopped.
Sep 1 12:17:11 Apple-TV com.apple.datamigrator[136] <Notice>: DataMigrator connections count went to zero.
Sep 1 12:17:11 Apple-TV Setup(SetupAssistantTV)[106] <Notice>: Attempting to retrieve cloud config from <private>
Sep 1 12:17:11 Apple-TV Setup[106] <Notice>: Setup showing controller <private>
Sep 1 12:17:11 Apple-TV BTServer[54] <Notice>: Attempting to set new class of device: 525372. Prior cached value is 525372
Sep 1 12:17:11 Apple-TV BTServer[54] <Notice>: Discovered device <private>
Sep 1 12:17:11 Apple-TV securityd[74] <Notice>: cert[0]: AnchorTrusted =(leaf)[force]> 0
Sep 1 12:17:11 Apple-TV profiled(Security)[115] <Notice>: [leaf AnchorTrusted]
Sep 1 12:17:11 Apple-TV Setup(CFNetwork)[106] <Notice>: TIC TCP Conn Start [3:0x17018b870]
Sep 1 12:17:11 Apple-TV Setup(CFNetwork)[106] <Notice>: TIC TCP Conn Event [3:0x17018b870]: 1 Err(0)
Sep 1 12:17:11 Apple-TV Setup(CFNetwork)[106] <Notice>: TIC TCP Conn Connected [3:0x17018b870]: Err(0)
Sep 1 12:17:11 Apple-TV Setup(CFNetwork)[106] <Notice>: TIC Enabling TLS [3:0x17018b870]
Sep 1 12:17:11 Apple-TV Setup(CFNetwork)[106] <Notice>: TIC TLS Event [3:0x17018b870]: 2, Pending(0)
Sep 1 12:17:12 Apple-TV Setup(CFNetwork)[106] <Notice>: TIC TLS Event [3:0x17018b870]: 11, Pending(0)
Sep 1 12:17:12 Apple-TV Setup(CFNetwork)[106] <Notice>: TIC TLS Event [3:0x17018b870]: 12, Pending(0)
Sep 1 12:17:12 Apple-TV Setup(CFNetwork)[106] <Notice>: TIC TLS Event [3:0x17018b870]: 14, Pending(0)
Sep 1 12:17:12 Apple-TV securityd(CFNetwork)[74] <Notice>: Stream client bypassing proxies on TCP Conn [1:0x100339a90]
Sep 1 12:17:12 Apple-TV securityd(CFNetwork)[74] <Notice>: TCP Conn 0x100339a90 started
Sep 1 12:17:12 Apple-TV securityd(CFNetwork)[74] <Notice>: TCP Conn 0x100339a90 event 1. err: 0
Sep 1 12:17:12 Apple-TV securityd(CFNetwork)[74] <Notice>: TCP Conn 0x100339a90 complete. fd: 20, err: 0
Sep 1 12:17:12 Apple-TV securityd(CFNetwork)[74] <Notice>: TCP Conn 0x100339a90 canceled
Sep 1 12:17:12 Apple-TV securityd[74] <Notice>: cert[2]: AnchorTrusted =(leaf)[force]> 0
Sep 1 12:17:12 Apple-TV Setup(Security)[106] <Notice>: [root AnchorTrusted]
Sep 1 12:17:12 Apple-TV Setup(CFNetwork)[106] <Notice>: <MCHTTPRequestor: 0x17409b260> failed to communicate to the server. Error: NSError:Desc : The operation couldnM-bM^@M^Yt be completed. (NSURLErrorDomain error -1012.)
Domain : NSURLErrorDomain
Code : -1012
Extra info:
{
NSErrorFailingURLKey = "https://mdm.bowdoin.edu/cloudenroll";
NSErrorFailingURLStringKey = "https://mdm.bowdoin.edu/cloudenroll";
}
Sep 1 12:17:12 Apple-TV Setup(SetupAssistantTV)[106] <Notice>: Cloud config retrieval attempt completed
Sep 1 12:17:12 Apple-TV Setup(SetupAssistantTV)[106] <Notice>: Error enrolling: <private>
Sep 1 12:17:12 Apple-TV Setup(CFNetwork)[106] <Notice>: TIC TCP Conn Cancel [3:0x17018b870]
Sep 1 12:17:12 Apple-TV Setup(UIKit)[106] <Error>: <UIVisualEffectView 0x14fe72080> is being asked to animate its opacity. This will cause the effect to appear broken until opacity returns to 1.
Sep 1 12:17:12 Apple-TV Setup(CFNetwork)[106] <Error>: HTTP load failed (error code: -999 [1:89])

They seem to fail on the URL somehow. It doesn't make a whole lot of sense since we enroll iPads the exact same way and they all work. We're running the latest build of the JSS as well.

Any thoughts?

[canopimp]

What version of the JAMF Pro server are you on? Do you have a prestage just for AppleTVs?

[jpellet2]

We were on 9.99 and had the error so upgraded to 9.100 with the same issue. We do have a pre-stage just for AppleTVs.

[jpellet2]

So, interesting find: We are now getting the same error on all DEP iOS devices. We weren't originally but now get the -1012 error for all of them. Our token and certs are fine but perhaps I'll renew them just in case something has gone wrong there.

[jpellet2]

New token doesn't help. When I browse to /cloudenroll the page is blank. I don't know if it should be or not.