Device Enrollment - Error: The server certificate for "myserver" is invalid?

Hello,
I am attempting to enroll my iPhone in the Lion Server Profile Manager. I have aquires and SSL certificate on my Lion Server but do not have a code signing certificate. From my iPhone, I can log into http://myserver.mydomain.lan/mydevices and log in using my AD credentials when I try to install the Device Enrollment Profile I am prompted with the following message: The server certificate for "https://myserver.mydomain.lan/devicemanagment/api/device/ota_service" is invalid.
Not sure how to get around this...
I am using AD with an extended schema and was not sure if MDM absolutely requires OD credentials or if I could use my AD credentials when enrolling a device. I was also unsure if I needed the code signing certificate which appears to be a bit pricey from Go-Daddy. I am just test bedding MDM and do not wish to go through the expense of a code signing certificate at this point.
Has anyone else encountered this problem?
Thanks,
Ray

Not sure if this will help, but we encountered the same problem. Our workaround was to click on the "Profiles" tab & install the Trust Profile first (not the Everyone Profile) and then enroll the device. That seemed to work, but I don't know what's causing that error message. Hopefully someone with more knowledge than me can answer that one.

Similar Messages

How can I ignore server certificate for wireless connection?

I just got a Treo 800w and can't get it connected to my work wireless. It uses PEAP MS-CHAPV2. How can I get the device to ignore the server certificate?
Thanks,
Adam
Post relates to: Treo 800w (Sprint)

You can't. You would need to have your IT to setup the wireless with the certificate on the device.
Post relates to: Palm Z22

Is a truststore neeeded if the server certificate is signed by a CA?

I have a server SSL certificate that has been signed by a trusted certificate authority (CA). I'm using a java desktop application to consume web services at that server over ssl/https using Axis 2 (no client certificate authentication). Everything is working fine, but I see code examples using a truststore or keystore (by the way, what is the difference?) and I'm starting to wonder if I need to use this kind of mechanism. Some articles I have read imply that I don't need to use a keystore because the server's certificate is signed by a CA. I've read lately about some man-in-the-middle attacks that involve intercepting https traffic and impersonating the server. Will my solution be vulnerable to this kind of attack if I don't use a keystore? If I simply provide Axis with an https endpoint url of the web services, will my solution be secure? Any help would be appreciated. Thanks.

SSL provides you with privacy, integrity, and authentication. That is, the messages are encrypted, tamper-evident, and come from an authenticated identity. Whether that's the identity you want to talk to is another question. So the application has to perform the authorization step, i.e. check the identity against what is expected. You do this by getting the peer certificates out of the SSLSession, usually in a HandshakeCompletedListener, and check that the identity of the server is what you expect. SSL can't do this for you as only the application knows who it expects to talk to. Another way around this is to ship a custom truststore that only contains the server certificate for the correct server, so it won't trust anybody else.

JavaScript Error when adding the Server Behaviors for insert Record in php_mysql

Hi guys,
I am using Adobe DreamWeaver CS4.
Here is the Scenerio, i am doing php mysql driven website.
While adding the server behavior for insert record i got following error
Plz help me..
Thanks in Advance
RafelNash

Have you found a fix to this??

Weblogic server 9.2 and SSL server certificate for the wrong site

I turned on SSL service for a weblogic 9.2 server and later on changed the hostname of the machine that weblogic was running on. So the hostname that my SSL server certificate was issued to has now became an invalid hostname. But my weblogic server continues to run SSL service without any exception. I can still access my web applications thru the SSL port (except of course I get a warning for the server certificate every time that it is for the "wrong site"). My question is this: should weblogic 9.2 verify the hostname in the server certificate and stop SSL service if the certificate is for the wrong site? Or is verifying the certificate strictly the job of the browser? Just want to make sure there is nothing wrong with my SSL configuration. Thanks.

So you are saying that something is wrong with my weblogic 9.2 ssl configuration? And that given a server certificate issued to a different hostname, my weblogic server should NOT be servicing ssl request and/or it should throw some sort of exception during startup? Thanks for clarifying.

When I run ical on my mac I get the error: The server responded with an error. The request for account "Yahoo!" failed. The server responded with "504" to operation CalDAVAccountRefreshQueueableOperation.

When I run ical on my mac I get the error:
The server responded with an error.
The request for account “Yahoo!” failed.
The server responded with
“504”
to operation CalDAVAccountRefreshQueueableOperation.
I hit "go online" and almost immediately I get the same message again. Any ideas?

I am tired of how Yahoo has gotten worse and worse. It is the ONLY account I get problems with DAILY (even after removing and re-adding). AOL will act up once in a while not taking a saved password but accepting it when OK is clicked.... But Yahoo is always responding with such errors.... Today's calendar error is:
The request (CalDAVAccountRefreshQueueableOperation) for account “Yahoo” failed.

How to get the Server Certificate Chain File?

Hi all,
I config the SSL for weblogic 6.0 on a Win2k Machine .I followed WebLogic
documentation:
Generate a private key file, then submit to Verisign, get the certificate
file.
Because I have only one WebLogic server. I clear the "Server Certificate
Chain File" field.
But I get error message after reboot WebLogic. Following is the error
message:
<2001-1-21 04:57:56 pm> <Alert> <WebLogicServer> <Inconsistent security con
figuration, java.lang.Exception: Required file server-certchain.pem which is
spe
cified by ServerCertificateChainFileName, was not found>
java.lang.Exception: Required file server-certchain.pem which is specified
by Se
rverCertificateChainFileName, was not found
at
weblogic.t3.srvr.SSLListenThread.resolvePropertyFromLocalFile(SSLList
enThread.java:152)
at
weblogic.t3.srvr.SSLListenThread.resolvePropertyFromAdminServer(SSLLi
stenThread.java:180)
at weblogic.t3.srvr.SSLListenThread.<init>(SSLListenThread.java:425)
at weblogic.t3.srvr.SSLListenThread.<init>(SSLListenThread.java:297)
at weblogic.t3.srvr.T3Srvr.initializeListenThreads(T3Srvr.java:939)
at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:403)
at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:169)
at weblogic.Server.main(Server.java:35)
My question is: Should I input the rootCA certificate into the Server
Certificate Chain File field? If yes, where can I get the rootCA certificate
file?
Thanks

[sorry, deleted irrelevant wrong answer]

Has anyone had this problem with VPN iPad vpn connection could not validate the server certificate

Has anyone had this problem with IPad 3 after upgrade to IOS 7,
trying to to connect VPN , but I get this messag, "could not validate the server certificate".
I am trying to connect to Oracle VPN.

Has anyone found a solution for this yet? I am still getting the could not validate server certificate error. I have tried importing the entire certificate chain as well as importing each individual cert in the chain. My certificate works perfectly with the cisco vpn on my pc.
This is my first experience owning an apple product, and I am very disappointed with the customer support that I have received. I tried calling the help line and no one would even attempt to answer my question. I was then told that the Mac "geniuses" wouldn't know either and that I may be able to find an answer on the message boards. So I am reaching out to the community...Has anyone been able to figure out how to resolve this issue or even the specific cause? Any help is appreciated.

Restlet Error "The server has not found anything matching the request URI"

I want to serve some static html pages along with my restlet services from the same app ( running in Tomcat )
Here is my web.xml
<?xml version="1.0" encoding="UTF-8"?>
<web-app id="WebApp_ID" version="2.4"
            xmlns="http://java.sun.com/xml/ns/j2ee"
            xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
            xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee
                 http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
   <display-name>first steps servlet</display-name>
   
   <context-param>
      <param-name>org.restlet.application</param-name>
      <param-value>
         firstSteps.FirstStepsApplication
      </param-value>
   </context-param>
   
   <servlet>
      <servlet-name>RestletServlet</servlet-name>
      <servlet-class>
         org.restlet.ext.servlet.ServerServlet
      </servlet-class>
   </servlet>
   
   <servlet-mapping>
      <servlet-name>RestletServlet</servlet-name>
      <url-pattern>/*</url-pattern>
   </servlet-mapping>
</web-app>
Here is my Application router class
public class FirstStepsApplication extends Application
     @Override
     public synchronized Restlet createInboundRoot()
          Router router = new Router(getContext());
          // Defines only one route
          router.attach("/hello", HelloWorldResource.class);
          router.attach("/login", LoginResource.class);
          router.attach("/", BasicResource.class);
          return router;
}I've gone back to the basic first steps example.
It works fine if the url pattern is <url-pattern>/*</url-pattern>
localhost/rest/login returns a string from my LoginResource, same too for /hello
However a static html page I have /Mypage.html does not get returned when I enter the URL /MyPage.html
However, if I then modify the url pattern to be
<url-pattern>/login</url-pattern>
and then enter the url /MyPage.html I will get the html page.
But ...... I get the error "The server has not found anything matching the request URI" when I enter the url /login which worked ok the first case.
What must I do in order for both Restlet & Static HTML resources to work together?
Thanks ... J

yes, basicResource is my own class. It's a catch all for restlet requests that don't match any of the other ones. It just returns String = "My catch all resource"
Because you highlighted it I decided to try and remove it from my Restlet Router. Presto, it now works, the login & hello requests are serviced by my Restlet resources and the MyPage.html requests are served the mypage.html file. This now brings another question. If from my servlet mapping in web.xml all urls are to be handled by restlet "/*", how then does a mypage.html request not get serviced by my restlet? Seems to be just passed through the restlet framework when there is no router to match it? what do you think?

SSL ERROR : The required certificate was not found

I am using Adobe Javascript this.submitForm to submit FDF. This works fine in Windows. When the same pdf is opened in a Linux environment I get the following error:
SSL ERROR : The required certificate was not found
and am required to run acroread -installCertificate.
This I do and it succeeds but the SSL error persists.
The this.submitForm command is given below:
/this.submitForm({cURL: 'https://some-webpath/FILE.cgi#FDF',bFDF: true,bGet: false});
When reading the documentation for the submitForm I see that the Acrobat Web Capture plug-in should be installed: I notice this is the case in Windows but not in Linux. Where can I get this?

Hi Ben,
The behavior you have noticed with the newly installed certificate files in
[home-folder]/.adobe/Acrobat/[version]/Cert folder
and the
[install-folder]/Adobe/Reader8/Reader/Cert/curl-ca-bundle.crt file is correct. Further, the behavior has not changed between Reader versions 8.x and 9.x
It is possible that the problem may be of the installed certificate not linking up to one of the Root CA-s. An Intermedia-CA certificate may be needed to be installed.
Could you mail me at " sanath at adobe dot com ", if possible, with more information about the problem (the PDF, the certificate in question - the file named like 123456.0 ), so that we at Adobe can work on resolving your problem
Regards
Sandip

SharePoint Error "The security validation for this page is invalid" when delete an item

Hi,
I have SharePoint 2010 setup and works fine until today all of a sudden it throws error "The security validation for this page is invalid" when delete a SharePoint document or list item.
There is no custom event handler deployed on library/list, and it should not be account issue as the same account works yesterday, and even after I turn off security validation from Central Admin, it still doesn't work.
The only change I did is turn off Dynamic Compression from IIS, after that I tried enable back Dynamic Compression but it still doesn't work.
Does anyone know what could be the possible reasons? Thanks in advance.

hi,
in the page just try to make this :
<SharePoint:FormDigest runat="server" />
PrasadWT

In perfdatasource querying for global snapshot failed with error 'the size limit for this '

I received scom alerts from two win 2k8 r2 servers , hosting exchange 2010 mailbox roles , the alerts came almost in same time from both servers ,
can I ignore those alerts
or can someone give a me a clue how can I troubleshoot those alert , please any help would be appreciated
In PerfDataSource, querying for Global Snapshot failed with error 'The size limit for this '
from Ops-mgmt logs
Log Name: Operations Manager
Source: Health Service Modules
Date:
Event ID: 10104
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: server 1
Description:
In PerfDataSource, querying for Global Snapshot failed with error 'The size limit for this '
One or more workflows were affected by this.
Workflow name: Microsoft.Windows.Server.2008.OperatingSystem.PercentMemoryUsed.Collection
Instance name: Microsoft Windows Server 2008 R2 Enterprise
Log Name: Operations Manager
Source: Health Service Modules
Date:
Event ID: 10104
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: server 1
Description:
In PerfDataSource, querying for Global Snapshot failed with error 'The size limit for this '
One or more workflows were affected by this.
Workflow name: Microsoft.Windows.Server.2008.LogicalDisk.PercentIdle.Collection
Instance name: " edb file path "
Log Name: Operations Manager
Source: Health Service Modules
Date:
Event ID: 10104
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: server 2
Description:
In PerfDataSource, querying for Global Snapshot failed with error 'The size limit for this '
One or more workflows were affected by this.
Workflow name: Microsoft.Windows.Server.2008.NetworkAdapter.CurrentBandwidth.Collection
Log Name: Operations Manager
Source: Health Service Modules
Date:
Event ID: 10104
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: server 2
Description:
In PerfDataSource, querying for Global Snapshot failed with error 'The size limit for this '
One or more workflows were affected by this.
Workflow name: Microsoft.ForefrontProtection.FPE.Server.PerformanceCollection.RealtimeScanMessageRate

Hi Blake ,
Thanks for your reply , I appreciate your help ,
I didn't put the alert from scom console because they were same as the events ( same source )
Health Service Modules, I didn't want to spam
more :-)
also the two servers encountered the issue were mailbox servers and part of same DAG , it worth mention the alert were resolved
by Exchange 2010 Correlation Engine service
http://blogs.technet.com/b/kevinholman/archive/2010/10/15/clustering-the-exchange-2010-correlation-engine-service.aspx
http://support.microsoft.com/kb/2592561
also the Opsmgmt logs are full of waring and error event like 2023 , 21402 , 21403 , 1207 !!
Log Name: Operations Manager
Source: HealthService
Date:
Event ID: 2023
Task Category: Health Service
Level: Warning
Keywords: Classic
User: N/A
Computer: server 1
Description:
The health service has removed some items from the send queue for management group "SCOM" since it exceeded the maximum allowed size of 15 megabytes.
1- alert from console >>
In PerfDataSource, querying for Global Snapshot failed with error 'The size limit for this '
One or more workflows were affected by this.
Workflow name: Microsoft.Windows.Server.2008.OperatingSystem.PercentMemoryUsed.Collection
Instance name: Microsoft Windows Server 2008 R2 Enterprise
EventSourceName: Health Service Modules

Redeemed the iTunes gift card it gave an error: The gift certificate or prepaid card code you entered has not been properly activated.

Redeemed the iTunes gift card it gave an error: The gift certificate or prepaid card code you entered has not been properly activated.

do you have the receipt from where you bought it? If so take it back and see what they will do for you.

Error:- The server was unable to save the form at this time. Please try again.

Hi,
I have SP 2013 intranet sites.
I am trying to edit the list item in site and getting the error "The server was unable to save the form at this time. Please try again."
I read many article on this forum. to chck web.config file, to restart
“SharePoint Search Hosting Controller” But no help.
Still i am getting this. what could be the reason now.
Please provide the resolution. I am trying to resolve this from last two days.
Thanks,
Rakesh

Normally, there's something wrong with the form responsible for editing list items. Is it customized? If not, you could use the free SharePoint Designer tool to delete the current form, create a new one (wait some time before caching issues are solved)
and you should be good to go. If it is customized, contact the team responsible for managing it.
Kind regards,
Margriet Bruggeman
Lois & Clark IT Services
web site: http://www.loisandclark.eu
blog: http://www.sharepointdragons.com

Why does a reboot set the modified-date of the server certificate?

I was inspecting my certificates and noticed that the certificate I use for my server had a modified date of Dec 12, whereas it was created around April of this year.
Dec 12 saw a reboot of my server and adding the `uptime` to the 'modified date' of the certificate gets me to 'now'. So, it seems a reboot sets the modified date of the server certificate. Can someone confirm this and does anybody know wht this is the case?

Yes, I found the same tricks but if I only set pereferred width. the result is not that I expected. so I use the following code to do it:
tc.setPreferredWidth(maxsize+5);
tc.setMaxWidth(maxsize+5);I don't know why must I add 5 point to display the string completely.

Device Enrollment - Error: The server certificate for "myserver" is invalid?

Similar Messages

Maybe you are looking for