User Initiation enrollment failing

pshouston
New Contributor II

We have been using the User Initiation Enrollment where we send an email to the user, they log in, and the management profile is installed. This is our second year using this with no problem. This afternoon, this seems to have stopped working. The user clicks the link within the email. He gets the typical "Log in to enroll your device." He logs in with the username/password we have provided, then he clicks the "Enroll" button. He then gets the "To continue, you need to install the CA certificate for your organization," and he clicks Continue. It's at this point a white window pops up that we have never seen before...and it pops up VERY briefly. See attached. Then it seems the installation fails and we get two more messages (see attached.) 81e160119816455b9a19f8816e59998f
157ccbadeed54ec9af53bedb410f545d
72fbdde57568470e8c918fffa88ffda4

3 REPLIES 3

sharriston
Contributor II

I hope this helps but as of iOS 10.3 it may even be the newest point release, you can't use a self signed certificate generated by your JSS to enroll iOS devices. I believe you can still accept the certificate manually basically after getting the error message got to settings>about>Certificate and Trust settings and click the switch next to your self signed certificate. I'm sure someone can correct me if I'm wrong but that was the issue we were seeing.

eosagie
New Contributor

We are experincing the same issue. The self signed certificate switch is no longer available on iOS 10.3.3
Is there a workaround for this as we are not currently set up for DEP?

HCSTech
Contributor
Contributor

Check out this article: https://www.jamf.com/jamf-nation/articles/464/changes-in-user-initiated-enrollment-with-untrusted-certificate-authority-ca-signed-ssl-certificates-in-ios-10-3-and-later