Purge a device from Profile Manager

Is there a way to completely remove any record of a device from profile manager ?
Problem: I have two phones which were managed/supervised by Profile Manager/Configurator but were then reset and deleted from Profile Manager. BUT for some reason their SIMs have been swapped so when I reinstate them on Profile Manager it gets confused as it seems to have "remembered" each phone but using its old number i.e. the number on the SIM swapped to the other phone. As a result we cannot push any settings to those phones (they do enrol though).
Any ideas?

You're not going crazy :)
There were a few posts about this problem along with a fix being posted
The fix consisted of manually purging the sim/iphone records from the profile manager database via terminal
From memory the method changed when mountain lion was released, the old method didn't work
Sorry I can't find the post that referred to the fix
This problem persisted from lion to mountain lion, I'm not sure if it's been fixed

Similar Messages

Can't enroll devices with Profile Manager - invalid key

n my case I can install profiles on devices from Profile Manager page but I cannot enroll devices.
The certificate I download to enroll is reject by my MacBook Pro Lion: Says Invalid blablabla at the end:
Now I have done log research and I now exactly and understand why it doesn't work:
the scep_helper daemon is supposed to listen to port 1640 TCP (which you should forward to your server by the way, if you want to be able to enroll devices) and provide the requsting client the root CA that signed the certificate. In my case, it can't find the root CAT to provide the client with so it can finalize the cert validation process.
In my case, that's what I see in the log:
Jul 29 02:12:44 teknologism scep_helper[1638]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:727 'status = SCEPGetCACert(session, NULL, 0)' = -25300
Jul 29 02:12:44 teknologism scep_helper[1638]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:513 'SCEPGetCACert(session, NULL, 0)' = -25300
Jul 29 02:12:44 teknologism scep_helper[1638]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:819 'challenge = GetChallengeFromSCEP(password, guid, hostURL)' is NULL
Jul 29 02:12:44 teknologism ProfileManager[516]: Could not retrieve root certificate from open directory server.
No , as for the bad news: I have no idea on how to fix. Have dug into scep_helper, googled etc. Not a single clue on how to check it's configuration or even why it can't find the root CA. By the way everyhting else (I really mean everything, ical,cardav,web,wiki etc.) work great. And profile manager too, it's just the enroll thingy that doesn't work. And the root CA cert is in /etc/certificates. My server a legit Class 1 SSL cert signed by a system trsuted CA (Startfiel to name it)
I have tried with other certs etc... It's a no go.
Can anyone help ??
How can I add that missing CA Cert in opendirectory ?

Here is some more infos...
teknologism:root root# serveradmin settings devicemgr
devicemgr:SSLAuthorityChain = "/etc/certificates/trinity.teknologism.org.C1D19D55699B48C94A18787E4F53B4C3230E 91FE.chain.pem"
devicemgr:od_active = yes
devicemgr:ssl_active = yes
devicemgr:enableCodeSigning = yes
devicemgr:updated_at = 2011-07-28 16:04:52 +0000
devicemgr:email_delivery_method = ""
devicemgr:CodeSigningPrivateKey = "/etc/certificates/teknologism.org Code Signing Certificate.ED29CE4BD9D2926D64E60EF7A117EFDB2213F0CC.key.pem"
devicemgr:apns_active = yes
devicemgr:CodeSigningAuthorityChain = "/etc/certificates/teknologism.org Code Signing Certificate.ED29CE4BD9D2926D64E60EF7A117EFDB2213F0CC.chain.pem"
devicemgr:default_profile_created_at_least_once = yes
devicemgr:knob_sets_enabled:com.apple.mail.managed = yes
devicemgr:knob_sets_enabled:com.apple.vpn.managed = yes
devicemgr:knob_sets_enabled:com.apple.carddav.account = yes
devicemgr:knob_sets_enabled:com.apple.jabber.account = yes
devicemgr:knob_sets_enabled:com.apple.caldav.account = yes
devicemgr:email_authentication = ""
devicemgr:email_port = 25
devicemgr:email_username = ""
devicemgr:id = 1
devicemgr:last_modified_guid = ""
devicemgr:SSLPrivateKey = "/etc/certificates/trinity.teknologism.org.C1D19D55699B48C94A18787E4F53B4C3230E 91FE.key.pem"
devicemgr:od_master = "127.0.0.1"
devicemgr:apns_topic = ""
devicemgr:email_password = ""
devicemgr:mdm_acl = 2047
devicemgr:user_timeout = 43200
devicemgr:server_organization = ""
devicemgr:SSLCertificate = "/etc/certificates/trinity.teknologism.org.C1D19D55699B48C94A18787E4F53B4C3230E 91FE.cert.pem"
devicemgr:created_at = 2011-07-24 11:47:33 +0000
devicemgr:email_address = ""
devicemgr:email_domain = ""
devicemgr:CodeSigningCertificate = "/etc/certificates/teknologism.org Code Signing Certificate.ED29CE4BD9D2926D64E60EF7A117EFDB2213F0CC.cert.pem"
devicemgr:email_server_address = ""
devicemgr:admin_session = ""
The 3 CodeSigning certs/keys are in /etc/certificates and their permissions are correct.
Also, don't ask me why but my ProfileManager pane in Server.app is working again. It shows all the config...but can't modify anything....as soon as I try to modify it spins the waiting whell forever... I guess it's the same error as command line serveradmin...

Remove VPP Token from Profile Manager

Hello,
I recently set up a test OSX Mavericks server and enrolled our VPP for testing purposes. To continue testing other options, I signed up for a Meraki account, and wanted to see how their VPP process compared with OSX Server. However, when I tried to enroll the VPP at Meraki I got an error...
"one or more errors occurred. No changes have been saved. VPP service token contains invalid characters."
I am trying to trouble shoot this, but not having much luck. At first I thought it might be an issue with our account name because we have Japanese in the business name. However, when I made some changes to teh OSX server during testing and re-entered the VPP it said that it was in use and that continuing would reset it. I said OK.
So no I wonder if the Meraki error is a resualt of teh VPP token already being registered with a different MDM.
Any body have experience with this error from Meraki or with how to remove the token from OSX Server.
Thanks for any help or insight you can offer.
Leon McCormick

http://krypted.com/mac-os-x/removing-apps-from-profile-manager-using-postgres/
this will leave "null" entries but clear the rest
Apple needs to fix. One of the reasons I stopped using Profile Manager and switched to Meraki.

Remove app from Profile Manager

hello there,
Having set up my Lion Server with several users, I was testing the pushing of apps. It works just flawless.
But after playing I wanted to delete all the test apps I uploaded.
I can't find any option to delete them. Only a link on internet to delete it in the database.
Weird, one should be able to delete something?
Even, when I upload my first App, and then one day later the same App, but a newer file, still the old date of the first upload is in the App list.
Do I miss something?
Please helpme!
mattijn

http://krypted.com/mac-os-x/removing-apps-from-profile-manager-using-postgres/
this will leave "null" entries but clear the rest
Apple needs to fix. One of the reasons I stopped using Profile Manager and switched to Meraki.

How can users add their devices to Profile Manager without a user account?

We would like to allow company devices to be tracked, inventoried and managed in Profile Manager without creating a user account for each person so they can log into /MyDevices to download the mobile profiles. We aren't staffed to have someone manage user accounts as quickly as iPads are being purchased.
If we can't do some kind of guest access, can one user, maybe called Enroll, have literally one thousand devices attached to them?
The other alternative is to have the profiles on a small webpage with a password to download.

the easiest way is to use apple configurator
using apple configurator
enable enrollment in PM
un tick restrict to users in device library
apple configurator should pick up your server certs
and the PM auto enrollment profile
setup a enrolment wifi lan
configure your IOS devices with apple configurator adding the
server cert and your enrolment wifi lan
you'll still have to handle each device tapping yes to install each profile
but you should end up with the ipads in PM with no users
from there you can set which wifi you wish them to connect to
eg staff wifi, email setings, VPN etc.
open the correct ports on firewalls to allow PM to work internaly and externaily
and pr any port forwading as nessessary and you'll be able to wipe lock change settings outside on your network, providing the device is online.

Error enrolling devices in profile manager!!

I have enrolling my macbook to the profile manager.
When I go to the https://(FQDN)/mydevices/ , and I hit the enroll buttom after logining in, and download the config file, try to install.. I get an error that says:
"The profile is either missing some required information, or contains information in an invalid format."
The problem is that I managed to enroll my iPhone with no problems.. only my mac (which is running the server OS) is not enrolling.
the certificate is valid from a trusted commercial thing..
Can someone please help?

only my mac (which is running the server OS) is not enrolling.
Why are you trying to enroll your device management server in it's own device management?
I've never tested anything like that, but I bet you can't do that...

Cant see devices in My devices under Profile Manager

When I go into the web interface for Profile Manager to see my devices all I see is the MacBook which is the server. I have setup 10 Ipads using Apple Configurator as supervised, why cant I see them in My Devices?

Also, when I sign into the users portal, the only device shown is this MAC which is my server and I do not want the users to enroll and be able to wipe the server. How can I stop the MAC server from being on the My Device list for the Users.

How to rename registered devices on Profile Manager

When we use the Profile Manager for our iPad control, we can not select the each iPad to rename them . Is there any way we can rename the devices in Server side? Would you advise us how we can configure in Server side for allowing to rename them?
We use OS X:10.9.5/iOS:8.1/Server:3.2.2

You can only rename supervised devices with the profile manager.
All other devices will not show the Rename option at the Devices section.
The users can rename the devices and the new name will be shown after executing "Update Info" at the profile manager. I don't know any other way, with the exception of using the Apple Configurator.

Devices in profile manager not showing

I have profile manager set up and I have tried to enroll the device, but it does not show in the devices panel. I want to use profile manager to manage the devices, not so much the users. These macs are on a cart and they are bound to active directory and many students login to them on any given day. I also set up a default user so that they all get the same look and cannot change any settings. I am stumped. I was trying to find a log to look at but not sure where to start to trouble shoot. Suggestions would be appreciated I am running os x 10.7.4 lion server. Thanks

You should probably move this post to The OS X Server part of Apple Discussions.
https://discussions.apple.com/community/servers_enterprise_software/os_x_server
I don't have the clearance to actually move the post.

Cannot enroll iOS 7 devices in Profile Manager

Hi All,
I had some new employees start today who had already updated to the iOS 7 GM and we're having issues enrolling them into profile manager, which we use for all contacts, email, wifi configuration.
I noticed there was a server update to OS Server 2.2.2 (running on Mac OS X 10.8.5), and ran that already, rebooted and restarted all the services.
When a user on an iOS 7 device visits https://server.com/mydevices and hits the "enroll" option, the profile downloads, opens sytem settings as would be expected, prompts for the 4 digit passcode and then fails to install stating "This iphone/iPad is not activated".
Thinking this may have been a developer device, I updated one of our units using the release that happened a few hours ago. Again when I try to enroll I get the same error. I've also tried loading the enrollment profile to the device using Configurator, but no luck.
I've also added UDID based placeholders in profile manager, and no luck.
Anyone have any suggestions?
Thanks!

I was also having the same issue. Fortunately it has only been one device so far. Here is what I did...
1. I updated the server to 10.8.5
2. I updated Server to the newest version (2.2.2)
3. I restored the device using iTunes to a default state.
4. At this point I was able to get the Enroll button and enroll the device.
Now I am running into an issue with it not pushing the settings to the device. But I am testing some things to see what I can figure out. All of my other devices are working just fine.

How do I push VPP managed apps to devices using Profile Manager silently?

Here is my setup.
100 to 150 Ipads in carts used by their departments in classrooms.
OSX Mavericks Server running Profile manager
I use Apple Configurator to push a wifi payload to the ipads as well as an auto enrollment profile to connect to Profile Manager.
That part works like a dream.
Now that I have that working. I am having a problem pushing apps to the Ipads. I downloaded some free apps, GDrive for example, using the managed distribution.
But I cannot figure out how to push the apps to the iPads without having the iPads asking for an Apple ID and password.
I just want to push VPP apps to the iPads silently.
Thanks for any help.

Sorry. Added this to the wrong section.

Devices enroll but do not appear in the Devices section in Profile Manager

Hi,
I am able to download and install the enrollment file, and when I check the devices enrolled by a user I can see the device attached to that users name, but when I click the link arrow next to the device name or go into the devices page, the device doesn't appear. Anyone have a solution for this? It's preventing me from managing any devices as it appears as if they are not there. I also notice that the Enroll button is still there in "my devices" after successful enrollment.
Thanks,
David.

Just in case anyone else get's this issue I managed to fix it by first enrolling the device then entering a place holder for the device in profile manager using that devices serial number. Then it seems to recognise the device

How to write .CSV file to import device placeholder into Lion Server Profile Manager?

I'm now using Mac Mini with Lion Server (10.7.4). I've already setup a server with Profile Manager to manage some iOS devices.
Now I need to add many devices into Profile Manager. From some articles, (for example http://my.safaribooksonline.com/book/-/9780132778879/chapter-4dot-managing-accou nts/ch04lev1sec3), I found that I can use .CSV file to import many device placeholders at a time. So I create a .CSV file "devices.csv" with the content as the following:
iPhone001,12345ABCD12,,,
Then I import this file to "Devices" in Profile Manager, but in vain. It says that the placeholder is invalid.
If there's any one could provide some exemples? Thanks a lot.

Hi Nien-Yi Ho,
A little late, but perhaps someone else can benefit ...
The way I did this, is:
- create an empty Excel spreadsheet
- add 5 headers in the first row: DeviceName, SerialNumber, IMEI, MEID, UDID
- in the next rows add your devices and specs (for the iPhones and iPads I only added DeviceName, SerialNumber and IMEI specs)
- IMPORTANT: save the file as a Windows CSV file.
If you import the CSV file now, all should go well.

Profile Manager can't search devices

When attempting to search devices in Profile Manager on OS X Server 3, I receive an error that asks me to reload the page everytime. Granted it doesn't keep me from adding devices it is just inconvienient. Anyone have any suggestions on how to fix this?

I too am running into a similar issue. Although I am also seeing a problem with the server being able to push configuration profiles to OS X devices as well.
Are you seeing the same issue?

Set or Change Device Name in Profile Manager

Hello,
Is it possible to set or change the device name of an enrolled device using profile manager?
I notice WGMs old 'Set computer name to computer record name' is still there under Login Window options, but I couldn't find away to actually change the record name.
Am I missing something obvious?

The only way I have found to change the device name in Profile Manager is to change it on the device itself, then wait for the updated info to reach PM.
The option to "set the computer name to computer record name" will set the computer name to the name of a computer record that matches in Open Directory (based on MAC). This option would allow you to change the device name in Profile Manager in a round about way... change the computer record name in OD, wait for the change to make it's way to the computer, then back up to the Profile Manager. In my experience, this doesn't take too long.

Purge a device from Profile Manager

Similar Messages

Maybe you are looking for