Deploy provisioning profile through profile manager/mydevices

Hi,
Is there a way in which you can deply an adhoc mobileprovision profile through profile manager along with the app? I am having to email the provisioning profile around to allow the app that is on the server to install.
Thanks!

Hi,
Having the exact same problem - did anyone solve this issue - distribution a provisioning profile through profile manager?

Similar Messages

I can't connect with iphone or ipad to profile manager mydevices page

Hello world,
I'm trying to enroll my iphone and my ipad on https://server17.pretendco.com/mydevices (my hostname) but I can't...
All work perfectly with my 2 macs....
What's the problem?
All the devices are on the same subnet 10.0.1.0/24
What can I do?
Thanks
Server app v2.2.2 on Os X Mountain lion

To each other?
They won't.
Bluetooth is for connecting to input or output devices

Errors deploying Enterprise iOS app through Profile Manager

We manage about 35 iPads through Profile Manager, including deploying a custom made app.
We first deployed this app in July and had no problems with it. Our third party developers have released an update for iOS 7 and we are running into problems pushing it out through Profile Manager.
When I try to upload the IPA file through the web interface I get the attached error. Looking at the logs I see the following errors:
Sep 16 14:42:50 mdm.servername.com ProfileManager[210] <Info>: Unable to find icon file for '/var/devicemgr/ServiceData/Data/tmp/temp_extracted_folder_for_data_file_30/Pay load/Hope.app/Icon-72.png'
Sep 16 14:42:50 mdm.servername.com ProfileManager[210] <Info>: Unable to find icon file for '/var/devicemgr/ServiceData/Data/tmp/temp_extracted_folder_for_data_file_30/Pay load/Hope.app/Icon.png'
This is the first time we've tried to update our custom app. In trying to narrow down whether it was a problem with Profile Manager or the app I uploaded an older version of Apple's Podcast app, and pushed it out to a test iPad, then uploaded the current version through Profile Manager and pushed it out to the iPads with no problems.
Our developers say that nothing has changed from the original version to the new version.
Any ideas?

We could solve this by opening the firewall for some ports (443, 1640, 2195, 2196, 5223, ) and ip addresses (17.0.0.0/8). Have a look at
OS X Server: Ports used by Profile Manager
Start Profile Manager

How to deploy settings in Profile Manager through Device Groups

When I go to the Profile Manager web page and create a device group and configure the payload settings it doesn't seem to send the profile settings to the Mac devices that are in the group. How do I go about getting this to work so when I get a new device that is enrolled all I have to do is throw it in the group so it will automatically push out the correct payload settings that I configured?

What you're asking should work. You should be able to create a Device Group and adjust the setting for that group. Then when you add a device to that group, the settings will be pushed to the device automatically. So, it leaves me with a few questions for you:
Why don't you think it sends the payload? When you look under "Activity" do you see tasks in the "Active" area or in the "Completed" area... or something else?
What are you trying to change? Setting up email accounts on iPhones will appear right away, but there are other changes (especially on computers) that don't take affect until it restarts (or the user at least logs out and back in).
Are you sure you have devices in your device group? Sorry, probably a really silly question, but under your device group, do you see the devices under the "Members" section?
Are your devices "trusting" your server? Did you add the trust profile to the device when you enrolled it?
Sorry I can't be more help... but I can tell you that you can do what you are asking. We have it set up in our office, and it works really well. We just add the new device to the device group and it does the rest.

Can I use the Profile Manager as an MDM while distributing app through app store?

Is it possible to use the Profile Manager within the OSX Server to provision profiles through apps purchased in the app store?
Ex: userX buys app in the app store, in downloading the app they get enrolled in the MDM / OSX Server I control. They select profile settings within my app and submit to OSX Server (Profile Manager) at which point I send back OTA the provisioned profile for them to upload.
Ex: https://itunes.apple.com/us/app/parentkit/id600618138?mt=8
Thanks for the feedback!

Is this not possible? Is it possible but not allowed?

Profile Manager Application Deployment

While working on building payloads in Profile Manager I encountered an issue with application deployment. It seems the applications I'm attaching are downloading, but failing during install. I read online that this is because Profile Manager does not have a provisioning profile and that to correct this you must either give it one or configure Profile Manager to obtain it automatically.
Anybody have information on this?

Hi,
note that as of today the only reason to use system-jazn-data.xml is if the application uses custom JAAS login modules or ADF Security. If you use J2E container managed authentication and authorization then you create a jazn-data.xml file in your project. The workspace-jazn-data.xml fil is used only if the project doesn't contain its own jazn-data.xml file.
To add a file, select New from the context menu on the project and go to the deployment descriptor section. Make sure you chose "all technologies" from the select box above and then select OC4J descriptors. Choose jazn-data.xml as a descriptor to create. After that, edit the jazn-data.xml file by right mouse clicking on it and selecting "properties" from the context menu.
The project jazn-data.xml file is deployed with teh application
Settings in the system-jazn-data xml file are not copie upon deployment and need to be added manually to the target platform
Frank

Can I restrict OS version upgrades for client MacBook Airs through Profile Manager?

Hello everyone,
We have all our employees MacBook Airs (all on 10.9.3+) enrolled on Profile Manager as a group. When Mavericks first came out early adopters caused us no end of problems trying to work between 10.9 and those still on 10.8.
We now have the Server App (3.1.2) running on our server (a Mac Mini running on OS X 10.9.4). Is it possible to restrict a group from installing the next OS X release (I can't mention its name or Apple takes the question down as it's not released yet) through Profile Manager? We can restrict access to the App Store but this is too general for us as people still need to be able to update Apps just not OS version updates.
Thanks,

If your users are plain users, they can't install anything without Admin access.
If your Users have Admin access, they can bypass anything, including whatever you THINK you gave them as restrictions with Profile Manager.

Access Mac Mini Server (profile management) through reverse proxy

Hi,
Newbie in Mac's world and yet trying to make it more complicated as it is.
As we recently (last month) decided to equip our sales force with iPads, they were configured through Apple Configurator tool running on a dedicated Mac Mini Mountain Lion.
Now, I'd be keen in moving this configuration to the Profile Manager, part of the OSx Server plugin. So far so good.
Problem is the following : another web server is already on the LAN using both 80 and 443 ports. So all incoming traffic on those ports was routed to this other server. As Mac Mini Server default http/s ports may not be altered, I installed a reverse proxy server (Oracle VM - Ubuntu 12.04LTS - pound), configured to deal differently traffic on those ports according to the domain name (host) of the web request (header). Each 'local' server has been allocated a domain name. Just to be clear, traffic is now routed by the WAN/LAN router, for those ports, towards the reverse proxy, configured to reroute the traffic to the correct destination.
So far so good, it works like a charm, except... as soon as we enter https protocol on Mac Mini Server Profile Manager.
Access from an iDevice to the Mac Mini Server Profile Manager login page is fine, but as soon as password is confirmed, safari is pending and finally a message 'An internal serer error occured. Please try later again' appears.
Looking to both reverse proxy system log and Mac Mini profilemanager.log files to trace the problem, the following lines are produced at this particular moment :
reverse proxy system.log
Jan 15 14:44:03 reverseproxy pound: 91.... GET /devicemanagement/console/apple_theme_v2/en/da56af0a69e733b259dac3991419fa928b4 94a56/resources/images/sprites/me_controls.png HTTP/1.1 - HTTP/1.1 200 OK
Jan 15 14:44:03 reverseproxy pound: 91.... GET /auth?redirect=http://osxsrv.fiks.net/devicemanagement/api/authentication/callback HTTP/1.1 - HTTP/1.1 302 Moved Temporarily
Jan 15 14:44:04 reverseproxy pound: 91.... GET /devicemanagement/api/authentication/callback?auth_token=336952DE-BDDE-4390-82F 7-8475B79FB2D3 HTTP/1.1 - HTTP/1.1 302 Moved Temporarily
Jan 15 14:44:04 reverseproxy pound: (b7680b40) e500 can't read header
Jan 15 14:44:04 reverseproxy pound: (b7680b40) e500 response error read from 192.168....:443/GET /profilemanager/ HTTP/1.1: Success (0.007 secs)
Jan 15 14:44:08 reverseproxy pound: 91.... POST /devicemanagement/api/magic/get_updated HTTP/1.1 - HTTP/1.1 200 OK
OSx Server profilemanager.log
Jan 15 14:44:05 osxsrv ProfileManager[1748] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:05) [POST]Jan 15 14:44:05 osxsrv ProfileManager[1749] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:05) [POST]
Jan 15 14:44:06 osxsrv ProfileManager[1748] <Info>: Completed in 492ms (View: 0, DB: 6) | 200 OK [http://osxsrv.../magic/do_magic]
Jan 15 14:44:06 osxsrv ProfileManager[1749] <Info>: Completed in 687ms (View: 0, DB: 5) | 200 OK [http://osxsrv..../magic/do_magic]
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: auth_token doesn't exist
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:07) [POST]
Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: auth_token doesn't exist
Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: Completed in 4ms (View: 1, DB: 14) | 403 Forbidden [http://osxsrv..../magic/do_magic]
Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:07) [POST]
Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: auth_token doesn't exist
Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: Completed in 45ms (View: 1, DB: 43) | 403 Forbidden [http://osxsrv..../magic/do_magic]
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:07) [POST]
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: auth_token doesn't exist
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Completed in 55ms (View: 0, DB: 1) | 403 Forbidden [http://osxsrv..../magic/do_magic]
Jan 15 14:44:08 osxsrv ProfileManager[1749] <Info>: Processing AuthenticationController#callback (for 91.... at 2013-01-15 14:44:08) [GET]
Jan 15 14:44:08 osxsrv ProfileManager[1749] <Info>: Redirected to https://osxsrv..../profilemanager/
Jan 15 14:44:08 osxsrv ProfileManager[1749] <Info>: Completed in 149ms (DB: 5) | 302 Found [http://osxsrv..../authentication/callback?auth_token=[FILTERED]]
I guess the '302 Found' is causing or explaining the problem.
I agree this might not be a Mac issue, so I still knock your doors hoping some of you could at least give a hint for what to search for !
If the pound configuration file is of interest, just ask, but this is pretty trivial, saying basically listen these protocols (http/https) on these ports (80/443) and according to Header content (check destination host) and reroute packet to LAN device (with given LAN IP address).
As the default port(s) of the Mac Mini Web Services may not be altered (so far I know), I guess I am stuck using 80 and 443 anyway.
Maybe should I invest time in changing my other apache server ports to some more exotic 8080 or 88 or whatever so Mac Mini Server Profile Manager default ports 80 and 443 are maintained and can be easily and directly rerouted to my Mac server without any reverse proxy along the way.
Thanks in advance for your help
Alx

HI All,
i'm also using reverse proxy technique to publish my server to the internet. The ip is used by twice domains. The problem is by using the profile manager
after login it redirects the url to the Local Area network addresse instead to the domain.
How to configure this on OS X Server and the Profile Manager Service?
Kind Regards
Oemer

Firefox doesn't open with profile even after creating a profile through Profile Manager.

I created a profile of Firefox yesterday using Profile Manager. And placed it in a virtual encrypted drive created by TrueCrypt. But Firefox didn't open with the profile. Instead it opened in default setting that Firefox usually gets when newly installed. I tried to select the profile through Profile Manager and open Firefox but to no avail. Even tried placing the profile in the Profile folder in Firefox pathway in AppData. Still same thing. At last reset Firefox and the profile was deleted. Now I'm with newly default setting. Luckily I had saved my bookmarks from Bookmark Manager.
I just wanted to save a profile so that only I can only access my profile and any other person would just had to use default setting. Also to restore my settings in case I install a fresh Firefox or reset Firefox to solve a problem.
Please help me fulfill my wants as stated above and why did it not work yesterday with the Profile Manager?

Hello ams963, i think the problem is with TrueCrypt because it is not support your win 8 yet. see: http://www.truecrypt.org/
http://www.truecrypt.org/docs/version-history
see if can find a method in the next link, not too useful i think for your win 8 : [http://kb.mozillazine.org/Protect_the_profiles_contents Protecting the contents of the profile]
thank you

App-V: A Configuration Template for Deploying to Stateless RDS Clients on Citrix Published Desktops with Citrix UPM for Profile Management

Please Vote if you find this to be helpful!
App-V: A Configuration Template for Deploying to Stateless RDS Clients on Citrix Published Desktops with Citrix UPM for Profile Management
Just posted this to the wiki:
http://social.technet.microsoft.com/wiki/contents/articles/25318.app-v-a-configuration-template-for-deploying-to-stateless-rds-clients-on-citrix-published-desktops-with-citrix-upm-for-profile-management.aspx

I would not recommend this and keep the package cache and the client on the same non-persistent drive and enable the Shared Content Store. If you separate the cache and the App-V client they could get out of sync and strange behaviour can occur.
You can use a temporary local profile with Citrix UPM or UE-V and specify what to roam/save.
You can use the Shared Content Store so packages will stream over the network. When the user logs on there is a publishing phase where shortcuts etc are created for the user, this will take some time.
Are you using the App-V full infrastructure?
Are you using a boot disk, partition or PXE in combination with PVS?

Fast User Switching through Profile Manager

We recently started using OS X Server to manage our Mac computers, currently only 2 but further expansion is expected. I only have one of the Macs set up on the server for testing purposes. We are primarily an Active Directory network and I have implemented Open Directory through OS X Server and bound that to the primary Windows domain controller.
So far, things have gone quite smoothly with the integration except for implementing fast user switching on the single client machine tied to the OS X Server box. I have gone through Profile Manager and under the Login Window settings for the laptop, enabled fast user switching. However, it still does not work on the client machine after the changes were pushed out.
The user does not get her user name listed in the upper right and we have found no other method of using fast user switching. She specifically wants to display the login window when she's not at her desk (and this is required for security reasons). As it is, she has to completely log out of her machine every time she leaves her desk which is, inconvenient, to say the least.
I have searched through the discussions here and every mention I've found that seems to reference this issue also references using network home directories, which we are not doing. I have the home directory set to continue to reside on the local machine so the AFP/NFS issue shouldn't apply.
Prior to implementing OS X Server, the only thing we were unable to do was limit external drive use and writable media on the Macs since they don't recognize those GPOs from the domain controller. Updates were easily handled through a third party appliance that we already use for all our other devices and computers on the network. At this point, if fast user switching is unavailable, it would be less work and less inconvenient for me to simply limit the external media use locally and allow the Mac to be locked by removing the influence of OS X Server.
If anyone knows how to enable it though, this would be my preference since the Software Update is *easier* through OS X Server.

I found the problem. The device group that the laptop in question was assigned to also has an option for fast user switching that was not enabled. I enabled it there and the problem was resolved.

Got Profile Manager working with Mtn Lion, but Apple's new deployment methodology has complicated things substantially - need help!

Hello,
We recently (a month or so ago) were able to set up OSX Server/Profile Manager/Workgroup Manager on Mtn Lion, and deploy to Mac desktops (deploy 802.1x settings and certs)
When we upgraded the OSX Server to Mavericks, everything changed - PM is different in this version. In order to enroll devices in PM it seems you need a Device Enrollment token, to get one you need to export a public key & add it to an MDM server on Apples website & in order to do that you need to create an account with Apple. To create that account you need your Apple Customer # & a ‘work email address’ that is not already used. Then you have to fill out a form & wait for Apple to approve it.
We have plans to utilize MDM at some point in the future, but for now, Profile Manager works fine - are we forced to utilize MDM in order enroll devices using profile manager with Mavericks/OSX Server 3.1.1?
Thanks for any and all help,
-Drew

Can anyone help with this?
Do I *have* to use MDM with OSX Server 3.1.1 in order to use PM?
Thanks,
-Drew

I believe I have implemented it correctly but I am not receiving the notifications on my phone. I have an ad hoc provisioning profile set up. I have the device token from the phone through NSLOG to console. I have the dot net code running without errors.

I believe I have implemented it correctly but I am not receiving the notifications on my phone. I have an ad hoc provisioning profile set up. I have the device token from the phone through NSLOG to console. I have the dot net code running without errors.The notifications just don’t appear.
Any ideas where I am going wrong?

IMAP account access by itself does not provide for syncing contacts, calendar events, and notes or anything over the air. This is possible with an Exchange account accessed via ActiveSync with the Exchange Server.
If your company email account is an Exchange Account, your company's IT Dept. has enabled IMAP account access for your Exchange account on the Exchange server?
If an Exchange account, the IT Dept. must have ActiveSync enabled for your account on the Exchange Server to create and access the account as an Exchange account which provides Push access for received messages, and over the air syncing for contacts and calendar events with the Exchange Server.

Updated! App-V: A Configuration Template for Deploying to Stateless RDS Clients on Citrix Published Desktops with Citrix UPM for Profile Management

I've updated my App-V Startup script that I use. The new version includes Event Logging as well as detailed logging, and its in PowerShell finally)
Check out the wiki!
http://social.technet.microsoft.com/wiki/contents/articles/25318.app-v-a-configuration-template-for-deploying-to-stateless-rds-clients-on-citrix-published-desktops-with-citrix-upm-for-profile-management.aspx

I've updated my App-V Startup script that I use. The new version includes Event Logging as well as detailed logging, and its in PowerShell finally)
Check out the wiki!
http://social.technet.microsoft.com/wiki/contents/articles/25318.app-v-a-configuration-template-for-deploying-to-stateless-rds-clients-on-citrix-published-desktops-with-citrix-upm-for-profile-management.aspx

Ipad enterprise apps update through Profile Manager

Hello,
we are using OS X Server Profile Manager to push enterprise Apps to an iPad fleet. It is working quite fine for the "initial" download : when a new app is made available to the iPads, it is downloaded without any problem.
The problem arise with "new release" of an existing app. For example, the developper (a web agency) release the 1.1 version of an existing app (in version 1.0).
I upload this new version in the profile manager app library. As it is the same app, it appaers under the same name. As we can't have any details on the enterprise Apps in the Profile Manager app library, I can not be sure that the newly uploaded app has properly replaced the old version. And on the iPads, nothing happens, they do not download the new version.
What am I doing wrong ? Is the Profile Manager supposed to be working to "push" new releases of enterprise app ?
Thank you.
PYC

Watch this video. It education based, but that's OK.
There are three ownership models:
Personal
Institution
Layered. combines personal & institution.
Here is the apple video on Layered ownership:
http://www.apple.com/education/resources/videos/#ios-layered-ownership
IT Resources -- ios & OS X -- This is a fantastic web page. I like the education site over the business site.
View documentation, video tutorials, and web pages to help IT professionals develop and deploy education solutions.
http://www.apple.com/education/resources/information-technology.html
   business site is:
   http://www.apple.com/lae/ipad/business/resources/
   business site is:
   http://www.apple.com/lae/ipad/business/resources/
With VPP an mdm is handy. Meraki is web based & free.
MDM -- moble device management
MDMs
Airwatch, Nukona, Meraki, mobleIron, OS X Server, or Zenprise
Meraki -- A free MDM
http://www.meraki.com/products/systems-manager/
https://discussions.apple.com/thread/4067210?tstart=0

Deploy provisioning profile through profile manager/mydevices

Similar Messages

Maybe you are looking for