Remove VPP Token from Profile Manager

Hello,
I recently set up a test OSX Mavericks server and enrolled our VPP for testing purposes. To continue testing other options, I signed up for a Meraki account, and wanted to see how their VPP process compared with OSX Server. However, when I tried to enroll the VPP at Meraki I got an error...
"one or more errors occurred. No changes have been saved. VPP service token contains invalid characters."
I am trying to trouble shoot this, but not having much luck. At first I thought it might be an issue with our account name because we have Japanese in the business name. However, when I made some changes to teh OSX server during testing and re-entered the VPP it said that it was in use and that continuing would reset it. I said OK.
So no I wonder if the Meraki error is a resualt of teh VPP token already being registered with a different MDM.
Any body have experience with this error from Meraki or with how to remove the token from OSX Server.
Thanks for any help or insight you can offer.
Leon McCormick

http://krypted.com/mac-os-x/removing-apps-from-profile-manager-using-postgres/
this will leave "null" entries but clear the rest
Apple needs to fix.  One of the reasons I stopped using Profile Manager and switched to Meraki.

Similar Messages

  • Remove app from Profile Manager

    hello there,
    Having set up my Lion Server with several users, I was testing the pushing of apps. It works just flawless.
    But after playing I wanted to delete all the test apps I uploaded.
    I can't find any option to delete them. Only a link on internet to delete it in the database.
    Weird, one should be able to delete something?
    Even, when I upload my first App, and then one day later the same App, but a newer file, still the old date of the first upload is in the App list.
    Do I miss something?
    Please helpme!
    mattijn

    http://krypted.com/mac-os-x/removing-apps-from-profile-manager-using-postgres/
    this will leave "null" entries but clear the rest
    Apple needs to fix.  One of the reasons I stopped using Profile Manager and switched to Meraki.

  • Purge a device from Profile Manager

    Is there a way to completely remove any record of a device from profile manager ?
    Problem: I have two phones which were managed/supervised by Profile Manager/Configurator but were then reset and deleted from Profile Manager. BUT for some reason their SIMs have been swapped so when I reinstate them on Profile Manager it gets confused as it seems to have "remembered" each phone but using its old number i.e. the number on the SIM swapped to the other phone. As a result we cannot push any settings to those phones (they do enrol though).
    Any ideas?

    You're not going crazy :)
    There were a few posts about this problem along with a fix being posted
    The fix consisted of manually purging the sim/iphone  records from the profile manager database via terminal
    From memory the method changed when mountain lion was released, the old method didn't work
    Sorry I can't find the post that referred to the fix
    This problem persisted from lion to mountain lion, I'm not sure if it's been fixed

  • How to remove Production System from Solution manager.

    Hi All,
    We have Three system landscape and solution manager installed.
    All the system are managed by Solution manager.
    here we are looking to remove the Production System from Solution manager.
    as in case if is there any problem in solution manager then we are not dependent on it.
    things will work directly on Production system.
    Could you please let us know the procedure to remove the system from solution manager.
    Please let us know if is there any document provided by SAP.

    Hi,
    Have you implemented charm,ccms monitoring or any other functionalities?
    if yes,.Delete the sytem from tms domain. and TR route needs to be adjusted, if you are using ccms, remove the agent details from RZ21 also.
    Does your production system data coming from SLD?
    if yes, Delete the entry from SLD
    if both the answer is no.
    1.delete  RFC from SOLMAN to the production systems.
    2. delete the production system using SMT2 transaction.
    3. Remove system rom SMSY from SOLMAN.
    Thanks,
    Jansi

  • How to remove stuck app in profile manager 3

    Greetings. In Profile Manger 3 Under Library apps I have an app that will not allow me to remove it. So, I backed  up my database and then  I did remove it from postgres db under the tables ios_applications*  and I did remove the app from the file location on the sever however it's still showing up in profile manger does anyone know how I can remove this app from the apps list?
    Sincerly,
    Tim

    So, this issue has been sovled. When installing OSX Server 10.9 the device manger database was replaced with a database named.
    devicemgr_v2m0
    I am not sure if this is the same name for all upgrades/new installs or diffrent based on the upgrade path.
    Tim

  • Can't remove an extension from Extension Manager CS6

    I have CS6 Design and Web Premium installed. I recently installed Layerhero's Lorem Ipsum extension. Then decided I didn't need it anymore. Now Extension Manager won't let me remove it.
    Any Ideas?

    I guess you must have changed the selected extension set to something other than "Customized Set" (the dropdown under search box in the top right corner). Please change it back to "Customized Set" then remove the extension.

  • Profile manager placeholder error

    Hello,
    Today we tried to register a new iPad Air onto our profile manager.
    During the enrolment only a placeholder was made, and the iPad info was not transferred to the profile manager.
    We then tried to remove the placeholder from profile manager, but every time we do this we get an error message " A Server Error has Occurred, please reload the webpage and try again".. Well we have tried and tried again but still this placeholder will not be deleted. Enrolling other devices still works, every other device in the profile manager still works.
    Can anyone point out how to solve this?

    Hello,
    We encountered the same error in our Profile Manager after having created an Enrollment Profile and then enrolling an Apple TV device (using the downloaded Profile in Apple Configurator). The Device registered as a placeholder called "New Device" and also strangely as "null" under "Enrollment Profiles / usage" in Profile Manager. Got the " A Server Error has Occurred, please reload the webpage and try again".. when trying to delete the placeholder. Finally we removed/deleted the Enrollment Profile from Profile Manager and then we could remove the placeholder without getting an error!
    Maybe this could work for you?
    /Henrik

  • Profile Manager says external company

    for some reason our vpp program email sent from profile manager on osx mavericks says external company. it used to say our company name but all of the sudden changed. i tried reloading the token from apple but it still says external company. any ideas?‹

    Just a FYI on an old thread.
    After 3 months of hassling Apple to fix it, engineering managed to issue a replacement token that actually has our institutions details on it for emails. 
    My suggestion is to keep hassling them, they will fix it eventually. 
    I found that in our VPP account summary it still says "External Company" but all the emails now say our institution name!!!

  • HT5188 Can I use Profile Manager to deploy paid Apps?

    Can I import VPP codes and push the apps to the ipads without user interaction?

    No, some user interaction will be required. With any MDM they will have to accept the app.
    While we use the term push, the user has to accept all App installations on the device. They will have to touch install. Please read below from:
    http://krypted.com/iphone/configuring-using-profile-manager-2-in-os-x-mountain-l ion-server/
    " This brings up an interesting limitation of how Profile Manager interacts with the App Store. It kinda’ doesn’t. If I were pushing apps to elementary school iPads in a 1:1 I could either use Apple Configurator (if I wanted to burn up a VPP code per student per year) or I could use iTunes (if I wanted a labor intensive process of restoring an iPad per computer rather than a parallel process). But either way, I’m gonna’ stay away from Profile Manager for apps.
    So if you push an app to a device and the user taps on the app and the screen goes black then make sure the app is owned by the AppleID signed into the device. If it is, have the user open App Store and update any other app and see if the app then opens."

  • Profile Manager Custom Settings multiple payloads?

    We have been unable to deploy multiple Mac OS X Custom Settings payloads in Profile Manager under a Device Group profile.
    We can seemingly create multiple Custom Settings payloads in one Device Group profile using Profile Manager's web interface, but when deployed, if more than one custom setting payload was created, none of the Custom Settings payloads will deploy.
    We can deploy a single Custom Settings payload per device group profile, and have verified our key/data pairs have correct syntax. But add a second custom setting and deployment fails.
    We have also tried downloading the multiple Custom Settings payload profile for manual installation, yet the issue still occurs - multiple custom settings payloads won't deploy. There must be some mangling in the XML content from Profile Manager.
    Mac OS X 10.8.4
    OS X Server 2.2.1
    Any common experience with this? Any workarounds? We could create multiple Device Groups, each with a single Custom Setting payload, but that will get very complicated very quickly.
    Otherwise we're stuck with using Workgroup Manager preference management for now.

    I have almost the exact same problem. This stupid issue/ bug has existed since server 10.7 I simply tried to import the com.apple.sidebarlists plist file from my local account. It almost seems to corrupt profile manager when anything is loaded into the custom settings. When I try to install the profile on another mac I don't have the Enroll option avaiable to me becuase it acts like it's already enrolled. Soon as I remove the custom setting the profile installs fine. If Apple can't make a critical part of profile manager work corretly they need to just remove it. This problem has existed for a while. I tried filing a bug report under apple.com/feedback since I don't have a develpoer account...but even that website doesn't have a choice for OSX server 10.7 or 10.8 becuase the stupid site is so outdated.

  • Can't enroll devices with Profile Manager - invalid key

    n my case I can install profiles on devices from Profile Manager page but I cannot enroll devices.
    The certificate I download to enroll is reject by my MacBook Pro Lion: Says Invalid blablabla at the end:
    Now I have done log research and I now exactly and understand why it doesn't work:
    the scep_helper daemon is supposed to listen to port 1640 TCP (which you should forward to your server by the way, if you want to be able to enroll devices) and provide the requsting client the root CA that signed the certificate. In my case, it can't find the root CAT to provide the client with so it can finalize the cert validation process.
    In my case, that's what I see in the log:
    Jul 29 02:12:44 teknologism scep_helper[1638]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:727 'status = SCEPGetCACert(session, NULL, 0)' = -25300
    Jul 29 02:12:44 teknologism scep_helper[1638]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:513 'SCEPGetCACert(session, NULL, 0)' = -25300
    Jul 29 02:12:44 teknologism scep_helper[1638]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:819 'challenge = GetChallengeFromSCEP(password, guid, hostURL)' is NULL
    Jul 29 02:12:44 teknologism ProfileManager[516]: Could not retrieve root certificate from open directory server.
    No , as for the bad news: I have no idea on how to fix. Have dug into scep_helper, googled etc. Not a single clue on how to check it's configuration or even why it can't find the root CA. By the way everyhting else (I really mean everything, ical,cardav,web,wiki etc.) work great. And profile manager too, it's just the enroll thingy that doesn't work. And the root CA cert is in /etc/certificates. My server a legit Class 1 SSL cert signed by a system trsuted CA (Startfiel to name it)
    I have tried with other certs etc... It's a no go.
    Can anyone help ??
    How can I add that missing CA Cert in opendirectory ?

    Here is some more infos...
    teknologism:root root# serveradmin settings devicemgr
    devicemgr:SSLAuthorityChain = "/etc/certificates/trinity.teknologism.org.C1D19D55699B48C94A18787E4F53B4C3230E 91FE.chain.pem"
    devicemgr:od_active = yes
    devicemgr:ssl_active = yes
    devicemgr:enableCodeSigning = yes
    devicemgr:updated_at = 2011-07-28 16:04:52 +0000
    devicemgr:email_delivery_method = ""
    devicemgr:CodeSigningPrivateKey = "/etc/certificates/teknologism.org Code Signing Certificate.ED29CE4BD9D2926D64E60EF7A117EFDB2213F0CC.key.pem"
    devicemgr:apns_active = yes
    devicemgr:CodeSigningAuthorityChain = "/etc/certificates/teknologism.org Code Signing Certificate.ED29CE4BD9D2926D64E60EF7A117EFDB2213F0CC.chain.pem"
    devicemgr:default_profile_created_at_least_once = yes
    devicemgr:knob_sets_enabled:com.apple.mail.managed = yes
    devicemgr:knob_sets_enabled:com.apple.vpn.managed = yes
    devicemgr:knob_sets_enabled:com.apple.carddav.account = yes
    devicemgr:knob_sets_enabled:com.apple.jabber.account = yes
    devicemgr:knob_sets_enabled:com.apple.caldav.account = yes
    devicemgr:email_authentication = ""
    devicemgr:email_port = 25
    devicemgr:email_username = ""
    devicemgr:id = 1
    devicemgr:last_modified_guid = ""
    devicemgr:SSLPrivateKey = "/etc/certificates/trinity.teknologism.org.C1D19D55699B48C94A18787E4F53B4C3230E 91FE.key.pem"
    devicemgr:od_master = "127.0.0.1"
    devicemgr:apns_topic = ""
    devicemgr:email_password = ""
    devicemgr:mdm_acl = 2047
    devicemgr:user_timeout = 43200
    devicemgr:server_organization = ""
    devicemgr:SSLCertificate = "/etc/certificates/trinity.teknologism.org.C1D19D55699B48C94A18787E4F53B4C3230E 91FE.cert.pem"
    devicemgr:created_at = 2011-07-24 11:47:33 +0000
    devicemgr:email_address = ""
    devicemgr:email_domain = ""
    devicemgr:CodeSigningCertificate = "/etc/certificates/teknologism.org Code Signing Certificate.ED29CE4BD9D2926D64E60EF7A117EFDB2213F0CC.cert.pem"
    devicemgr:email_server_address = ""
    devicemgr:admin_session = ""
    The 3 CodeSigning certs/keys are in /etc/certificates and their permissions are correct.
    Also, don't ask me why but my ProfileManager pane in Server.app is working again. It shows all the config...but can't modify anything....as soon as I try to modify it spins the waiting whell forever... I guess it's the same error as command line serveradmin...

  • Why don't network volume mounts (login items) configured in Profile Manager show up

    Using Lion server and Lion clients.  Bound both the server and client to Active Directory and successfully got Profile Manager up and running.  All I really need from Profile Manager is the ability to mount network volumes so when the user logs in it mounts their home directory.  Please note we do not specify any home directory paths in AD.  I can login with my AD accounts on the Lion client and get other Profile Manager settings to work, however when I try and mount a network volume via login items nothing happens.  I am using SMB for this.  If I try to manually connect to the same path via Go -> Connect To Server it works fine.  For a simple test I even created a folder on one of my Windows servers D drive and shared it and within profile manager configured it as SMB://server/share and still nothing.  I tried setting it in the Dock section as well which I read in another post somewhere but all I get is a question mark.  I have tried all variations of server name, FQDN, ip address, etc.  I know it's not permissions since it works when I try it manually so am really at a loss here.  Is there any way to log what happens at login to see if it's even trying to mount the volume?  I do know the client is getting the profile since i can see it in system preferences but it never works.  Any ideas would be greatly appreciated, thank you!

    @bkma did you find any solution? i run into the same problem.

  • Firefox will not start. Open profile manager. Delete old profile. Create new profile. Click start firefox. Firefox starts. Close firefox. Click start, "Mozilla Firefox", FireFox DOES NOT start. Help!?

    Firefox will not start.
    Run profilemanager and delete old profile - create new profile - click run firefox from profile manager and firefox opens.
    Close firefox and try to reopen. Will not open. Follow above procedure again and foerefox opens until closed them will not open.
    == This happened ==
    Every time Firefox opened
    == Last week ==
    == User Agent ==
    Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8

    Thanks for your help. I had tried starting Firefox in safe-mode before I posted this request, but it did not work. I tried to restore the system to an earlier version, but that made everything worse. Two accounts were unusable and one sort of worked, so I reloaded the operating system and now firefox works, for how long, I don't know. But thanks again for your suggestion.

  • Managed App Configuration using Profile Manager

    Hello,
    We're using Profile Manager as the MDM server of our iPads. Everything works fine except that recently we want to manage some app configurations through MDM, but were unable to find the Managed App Configuration settings from Profile Manager.
    May I know if Profile Manager supports Managed App Configuration for iOS?
    Thanks,
    Jacky

    We are not running it yet but I am believe that when you setup a user in airwatch or another MDM and you install the agent on a device the user has to authenticate with AD creds, so then you can configure it to pull a cert from your SCEP server using those creds and it will then pull a user cert. instead of a generic certificate. Obviously that is a pretty dumbed down explination but in a nutshell that is how it is going to work.

  • Profile Manager cannot set ibooks as single app mode in iOS

    Right now I had updated all my iPad to iOS 8.0.2, and the server is updated to the newest version,too.
    Sadly, When I want to setup the iPad to single app mode with iBooks, I cannot find it in the list.
    Is this means ibooks is no long support on the single app mode? Then why give us the new function about push ibooks?
    I have try the assistant function on my iPhone (8.0.2) itself, it can be locked in iBooks.
    Any one can tell me what is the problem?
    Many many thanks!

    HI Hines,
    I had the same problems after the 3.0.2 update: enrolling of devices not working, unable to push configurations from Profile Manager, etc.
    The update was a simple 3.0.1 => 3.0.2 on already updated OSX Mavericks to 10.9.1 and it seemed that all was ok, not like this situation: https://discussions.apple.com/message/24450438
    Services used:
    -Web
    -Profile Manager with 20 iPads/iPhones already enrolled and with some in-house app pushed
    I followed a solution similar to what suggested from Hines, apart from point #6. I was unable to re-download Server.app from App Store, greyed-out button.
    So I was very happy to have another mac to download a fresh copy of Server.app.
    Then:
    -Deleted and thrashed the old version
    -Message "all services stopped"
    -Reboot
    -Copied fresh "Server.app" to /Applications
    -Started "Server.app" that made some initial auto configuration
    -Services restarted
    I just had to restart the postgres service and seems that I didn't lost any data/config (I hope, I'm already checking!)
    =begin RANT
    I know that Apple is essentially an hardware manufacter manly for consumer target now but that a simple minor update broke an entire software meant to be solid, like a server must be, is just plain unacceptable.
    I know that OSX Server is very cheap and we can't pretend too much....but F**K...i loosed my sleep tonight!
    =end RANT

Maybe you are looking for