Cant see devices in My devices under Profile Manager
When I go into the web interface for Profile Manager to see my devices all I see is the MacBook which is the server. I have setup 10 Ipads using Apple Configurator as supervised, why cant I see them in My Devices?
Also, when I sign into the users portal, the only device shown is this MAC which is my server and I do not want the users to enroll and be able to wipe the server. How can I stop the MAC server from being on the My Device list for the Users.
Similar Messages
-
Can't enroll devices with Profile Manager - invalid key
n my case I can install profiles on devices from Profile Manager page but I cannot enroll devices.
The certificate I download to enroll is reject by my MacBook Pro Lion: Says Invalid blablabla at the end:
Now I have done log research and I now exactly and understand why it doesn't work:
the scep_helper daemon is supposed to listen to port 1640 TCP (which you should forward to your server by the way, if you want to be able to enroll devices) and provide the requsting client the root CA that signed the certificate. In my case, it can't find the root CAT to provide the client with so it can finalize the cert validation process.
In my case, that's what I see in the log:
Jul 29 02:12:44 teknologism scep_helper[1638]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:727 'status = SCEPGetCACert(session, NULL, 0)' = -25300
Jul 29 02:12:44 teknologism scep_helper[1638]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:513 'SCEPGetCACert(session, NULL, 0)' = -25300
Jul 29 02:12:44 teknologism scep_helper[1638]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:819 'challenge = GetChallengeFromSCEP(password, guid, hostURL)' is NULL
Jul 29 02:12:44 teknologism ProfileManager[516]: Could not retrieve root certificate from open directory server.
No , as for the bad news: I have no idea on how to fix. Have dug into scep_helper, googled etc. Not a single clue on how to check it's configuration or even why it can't find the root CA. By the way everyhting else (I really mean everything, ical,cardav,web,wiki etc.) work great. And profile manager too, it's just the enroll thingy that doesn't work. And the root CA cert is in /etc/certificates. My server a legit Class 1 SSL cert signed by a system trsuted CA (Startfiel to name it)
I have tried with other certs etc... It's a no go.
Can anyone help ??
How can I add that missing CA Cert in opendirectory ?Here is some more infos...
teknologism:root root# serveradmin settings devicemgr
devicemgr:SSLAuthorityChain = "/etc/certificates/trinity.teknologism.org.C1D19D55699B48C94A18787E4F53B4C3230E 91FE.chain.pem"
devicemgr:od_active = yes
devicemgr:ssl_active = yes
devicemgr:enableCodeSigning = yes
devicemgr:updated_at = 2011-07-28 16:04:52 +0000
devicemgr:email_delivery_method = ""
devicemgr:CodeSigningPrivateKey = "/etc/certificates/teknologism.org Code Signing Certificate.ED29CE4BD9D2926D64E60EF7A117EFDB2213F0CC.key.pem"
devicemgr:apns_active = yes
devicemgr:CodeSigningAuthorityChain = "/etc/certificates/teknologism.org Code Signing Certificate.ED29CE4BD9D2926D64E60EF7A117EFDB2213F0CC.chain.pem"
devicemgr:default_profile_created_at_least_once = yes
devicemgr:knob_sets_enabled:com.apple.mail.managed = yes
devicemgr:knob_sets_enabled:com.apple.vpn.managed = yes
devicemgr:knob_sets_enabled:com.apple.carddav.account = yes
devicemgr:knob_sets_enabled:com.apple.jabber.account = yes
devicemgr:knob_sets_enabled:com.apple.caldav.account = yes
devicemgr:email_authentication = ""
devicemgr:email_port = 25
devicemgr:email_username = ""
devicemgr:id = 1
devicemgr:last_modified_guid = ""
devicemgr:SSLPrivateKey = "/etc/certificates/trinity.teknologism.org.C1D19D55699B48C94A18787E4F53B4C3230E 91FE.key.pem"
devicemgr:od_master = "127.0.0.1"
devicemgr:apns_topic = ""
devicemgr:email_password = ""
devicemgr:mdm_acl = 2047
devicemgr:user_timeout = 43200
devicemgr:server_organization = ""
devicemgr:SSLCertificate = "/etc/certificates/trinity.teknologism.org.C1D19D55699B48C94A18787E4F53B4C3230E 91FE.cert.pem"
devicemgr:created_at = 2011-07-24 11:47:33 +0000
devicemgr:email_address = ""
devicemgr:email_domain = ""
devicemgr:CodeSigningCertificate = "/etc/certificates/teknologism.org Code Signing Certificate.ED29CE4BD9D2926D64E60EF7A117EFDB2213F0CC.cert.pem"
devicemgr:email_server_address = ""
devicemgr:admin_session = ""
The 3 CodeSigning certs/keys are in /etc/certificates and their permissions are correct.
Also, don't ask me why but my ProfileManager pane in Server.app is working again. It shows all the config...but can't modify anything....as soon as I try to modify it spins the waiting whell forever... I guess it's the same error as command line serveradmin... -
Purge a device from Profile Manager
Is there a way to completely remove any record of a device from profile manager ?
Problem: I have two phones which were managed/supervised by Profile Manager/Configurator but were then reset and deleted from Profile Manager. BUT for some reason their SIMs have been swapped so when I reinstate them on Profile Manager it gets confused as it seems to have "remembered" each phone but using its old number i.e. the number on the SIM swapped to the other phone. As a result we cannot push any settings to those phones (they do enrol though).
Any ideas?You're not going crazy :)
There were a few posts about this problem along with a fix being posted
The fix consisted of manually purging the sim/iphone records from the profile manager database via terminal
From memory the method changed when mountain lion was released, the old method didn't work
Sorry I can't find the post that referred to the fix
This problem persisted from lion to mountain lion, I'm not sure if it's been fixed -
Cannot enroll iOS 7 devices in Profile Manager
Hi All,
I had some new employees start today who had already updated to the iOS 7 GM and we're having issues enrolling them into profile manager, which we use for all contacts, email, wifi configuration.
I noticed there was a server update to OS Server 2.2.2 (running on Mac OS X 10.8.5), and ran that already, rebooted and restarted all the services.
When a user on an iOS 7 device visits https://server.com/mydevices and hits the "enroll" option, the profile downloads, opens sytem settings as would be expected, prompts for the 4 digit passcode and then fails to install stating "This iphone/iPad is not activated".
Thinking this may have been a developer device, I updated one of our units using the release that happened a few hours ago. Again when I try to enroll I get the same error. I've also tried loading the enrollment profile to the device using Configurator, but no luck.
I've also added UDID based placeholders in profile manager, and no luck.
Anyone have any suggestions?
Thanks!I was also having the same issue. Fortunately it has only been one device so far. Here is what I did...
1. I updated the server to 10.8.5
2. I updated Server to the newest version (2.2.2)
3. I restored the device using iTunes to a default state.
4. At this point I was able to get the Enroll button and enroll the device.
Now I am running into an issue with it not pushing the settings to the device. But I am testing some things to see what I can figure out. All of my other devices are working just fine. -
How to rename registered devices on Profile Manager
When we use the Profile Manager for our iPad control, we can not select the each iPad to rename them . Is there any way we can rename the devices in Server side? Would you advise us how we can configure in Server side for allowing to rename them?
We use OS X:10.9.5/iOS:8.1/Server:3.2.2You can only rename supervised devices with the profile manager.
All other devices will not show the Rename option at the Devices section.
The users can rename the devices and the new name will be shown after executing "Update Info" at the profile manager. I don't know any other way, with the exception of using the Apple Configurator. -
How can users add their devices to Profile Manager without a user account?
We would like to allow company devices to be tracked, inventoried and managed in Profile Manager without creating a user account for each person so they can log into /MyDevices to download the mobile profiles. We aren't staffed to have someone manage user accounts as quickly as iPads are being purchased.
If we can't do some kind of guest access, can one user, maybe called Enroll, have literally one thousand devices attached to them?
The other alternative is to have the profiles on a small webpage with a password to download.the easiest way is to use apple configurator
using apple configurator
enable enrollment in PM
un tick restrict to users in device library
apple configurator should pick up your server certs
and the PM auto enrollment profile
setup a enrolment wifi lan
configure your IOS devices with apple configurator adding the
server cert and your enrolment wifi lan
you'll still have to handle each device tapping yes to install each profile
but you should end up with the ipads in PM with no users
from there you can set which wifi you wish them to connect to
eg staff wifi, email setings, VPN etc.
open the correct ports on firewalls to allow PM to work internaly and externaily
and pr any port forwading as nessessary and you'll be able to wipe lock change settings outside on your network, providing the device is online. -
Error enrolling devices in profile manager!!
I have enrolling my macbook to the profile manager.
When I go to the https://(FQDN)/mydevices/ , and I hit the enroll buttom after logining in, and download the config file, try to install.. I get an error that says:
"The profile is either missing some required information, or contains information in an invalid format."
The problem is that I managed to enroll my iPhone with no problems.. only my mac (which is running the server OS) is not enrolling.
the certificate is valid from a trusted commercial thing..
Can someone please help?only my mac (which is running the server OS) is not enrolling.
Why are you trying to enroll your device management server in it's own device management?
I've never tested anything like that, but I bet you can't do that... -
Devices in profile manager not showing
I have profile manager set up and I have tried to enroll the device, but it does not show in the devices panel. I want to use profile manager to manage the devices, not so much the users. These macs are on a cart and they are bound to active directory and many students login to them on any given day. I also set up a default user so that they all get the same look and cannot change any settings. I am stumped. I was trying to find a log to look at but not sure where to start to trouble shoot. Suggestions would be appreciated I am running os x 10.7.4 lion server. Thanks
You should probably move this post to The OS X Server part of Apple Discussions.
https://discussions.apple.com/community/servers_enterprise_software/os_x_server
I don't have the clearance to actually move the post. -
How do I push VPP managed apps to devices using Profile Manager silently?
Here is my setup.
100 to 150 Ipads in carts used by their departments in classrooms.
OSX Mavericks Server running Profile manager
I use Apple Configurator to push a wifi payload to the ipads as well as an auto enrollment profile to connect to Profile Manager.
That part works like a dream.
Now that I have that working. I am having a problem pushing apps to the Ipads. I downloaded some free apps, GDrive for example, using the managed distribution.
But I cannot figure out how to push the apps to the iPads without having the iPads asking for an Apple ID and password.
I just want to push VPP apps to the iPads silently.
Thanks for any help.Sorry. Added this to the wrong section.
-
Lion Server app not responding(it says Error reading settings under profile manager tab)
Hello,
I have installed Lion server app 10.7.3 but due to some reason i am unable to use it since it gives me an error (Error reading settings)
I have fully made server app functional also added devices but now i cant use the profile manager tab.
Even when i try turning ON the tab it comes back to off state.
Need help.
Regards,
Vikram Madhav Shinde
<Phone number Edited by Host>I ended up booting to the recovery partition, erasing the hard drive, and starting over.
All is working fine now. -
Tasks locked under Profile Manager
Hi everybody,
I configured a mac mini server with OS X Server 3 to use MDM for my organization. We have about 70 iPads to manage and I want to push Free Apps, Exchange settings, etc.
Following the setup assitant, I try to add a new iPad by connecting to my mdm/mydevices. I can add my organisation profiles but when I go to the profile manager to see if everything is OK, I have an active task, corresponding to my new iPad. This task has no target and stay active, without completing.
I can't see anything interesting in log files (or maybe I don't know where to find interesting data ?)
Thanks in advance for your help !Also, when I sign into the users portal, the only device shown is this MAC which is my server and I do not want the users to enroll and be able to wipe the server. How can I stop the MAC server from being on the My Device list for the Users.
-
Cant add Apps to login items with profile manager
I can set up profile manager successfully, and set certain settings like the Dock, the login window, etc. But when I click on Login Items, and try to add an Application, the list of applications is blank. Tried it from my server, tried it logged in remotely, tried rebooting, tried it on several accounts and several groups, and its always empty.
found it:
/usr/bin/osascript -e 'tell application "System Events" to make new login item with properties { path: "/Applications/iChat.app", hidden:false } at end' -
Exchange under profile manager still not working
Hi guys,
In Lion 10.7 Server, there was an issue where we have to fill in the user and domain for MS Exchange even under group profiles. I just upgraded to ML Server and it seems to be still unfixed.I have not been able to access the exchange portlet as an external application. I have tried the various sugestions from
this forum but have still not succeded. It seems that the call
to ../servlet/exchangeApp?ExchangeAction=performlogin has no
effect -- it is not performing a login. Instead, it generates a
login page with blank parameters.
>
After deleting the external application (Exchange Inbox) and adding it again will all of the parameters included, I still
have the same problem -- the servlet generates a login page with
blank parameters. Supplying the parameters to this new page and
submitting the form has no effect.
>
The results of test.asp are "VALID".
Does anyone have any idea what may be going on here? We were hoping to go production in a few weeks with the exchange
portlets working.
>
Environment: Portal 3.0.9/W2K -> IIS/W2K -> Exchange 5.5/NT First, let me state that there are many implementations of the
exchange portlets that are working. Unfortunately, none of
those users are coming to this forum and talking about their
successes! That being said, we want to help you resolve your
issues and get the portlets implemented in your environment.
Typically, if the external application login is failing, it
means that one or more of the fields or values is incorrect.
I have seen an earlier posting indicating that once an external
application has been created, subsequent edits are not being
saved. While I have not seen that for myself, my first
suggestion to you is to create another external application
entry with the correct values and try logging into it again by
clicking on the application name in the Administer External
Applications page. -
Hi,
I am not able to see drop down menu in report manger, have loaded the internet explorer as administrator still it doesn't pop-up drop down menu in Windows Server 2012 platform and SQL Server 2012, can someone please help me out here, whether any settings
need to be made?
Thanks,
HarishHi Omar,
Thanks for the response, after getting some online help was able to fix the issue, I am using SSRS 2012, below link helped me to resolve the issue in IE 10.0 version
http://answers.microsoft.com/en-us/ie/forum/ie10-windows_8/set-desktop-ie10-to-always-use-compatibility-view/f09597f0-9c3b-437f-9d33-18b5e1ba078d
Thanks,
Harish -
Set or Change Device Name in Profile Manager
Hello,
Is it possible to set or change the device name of an enrolled device using profile manager?
I notice WGMs old 'Set computer name to computer record name' is still there under Login Window options, but I couldn't find away to actually change the record name.
Am I missing something obvious?The only way I have found to change the device name in Profile Manager is to change it on the device itself, then wait for the updated info to reach PM.
The option to "set the computer name to computer record name" will set the computer name to the name of a computer record that matches in Open Directory (based on MAC). This option would allow you to change the device name in Profile Manager in a round about way... change the computer record name in OD, wait for the change to make it's way to the computer, then back up to the Profile Manager. In my experience, this doesn't take too long.
Maybe you are looking for
-
Understand the basics of wireless photo printing
I've really found the reasons to use wireless printing, at least in the home. I have teenage kids and I've put laptops in their rooms. However, we only need one printer in the home so I've hooked up all the laptops with wireless access to the printer
-
Hardware reboot question?
Hi, I have a MacBook Pro early 2011, running 10.7.5. My AppleCare ran just ran out on March 1st and have now shown some battery issues. The battery doesn't seem to charge fully and I wanted to try a hardware reboot to see if that would make a differe
-
Anfrage von RoVo: Wie kann ich zusätzliche Nikon Lens Profile in Lightroom 5.7 downloaden ? In meiner Version werden nur 8 Profile angeboten, meine Objektive sind leider nicht dabei. Für eine Hilfe wäre ich dankbar.
-
Can i use express for wifi and my router for ethernet or do i need the extreme ?
Hi there . I'm interested in being able use the dual band feature of the new Airport products for better coverage on my iphone 5 . I have a wireless router with known conflicts with the iphone 5 . As I have never had any airport products I'm not exac
-
Can i use my old slr lenses with new dslr rebel T3i camera
I am contemplating buying the Canon Rebel T3i DSLR, but have read varying opinions on whether or not my older lense collection from Rebel Eos SLR will be compatible. Please help