Profile manager - iPads won't enroll "Websites are turned off"

[superfletch]

Hi,

 

I've inherited a large number of managed iPads in a school and, don't know as much about Macs / iPad MDM as I'd like.

 

I have a problem enrolling iPads into the organisations Profile Manager. Apple Configurator works OK for preparing the iPads - it numbers them sequentially, installs some certs and adds the Wifi connection details.

 

When I then use the iPad to connect to the macserver/mydevices page the page loads and I can tap on enrol but then it just gets stuck - eventually it responds with "Websites are turned off".

 

I've checked in the Server App and websites were turned off, but I have turned them back on but it makes no difference. Does anyone know what's likely to be up please? I'm back in the school soon and want to get their new iPads set up.

 

Thanks in advance.

[Brimstone]

Has the server been set up with a FQDN?

[Martyn_OIAM]

We don't have Websites turned on in the Server App. But if you check (in the Server App) Profile Manager is turned on and that in settings > Device Management: Enabled > tick Enrol devices using the device enrolment Program?

We have a Device Enrolment profile in Profile Manager. In the device, after you have entered the url macserver/mydevices don't click on the image, there should be a tab, which in our case takes us to install both a trust profile (to our server) and an enrolment profile.

Does that help?

[superfletch]

Thanks for both your replies.

 

I was on site this week and it doesn't say "Websites are turned off" any more - now when I hit enrol it moves forward a stage and tries to install a profile, but the profile fails to install - the message isn't helpful it just says "Profile Installation Failed".

 

I did a long support call with Apple but haven't got it resolved yet, the school has a Windows server which manages the DNS, the Mac points to this for its DNS.

NB - I didn't made any changes to this or to the Macs hostname between when it worked and when it broke, but there definitely seems to be an issue with DNS so I'm wondering how it worked in the first place.

 

The Mac has a hostname of macserver.local, but the FQDN should be macserver.schoolname.local, I've manually added a DNS record which reflects this.

 

When I do nslookup from either the Mac or the Win server to resolve macserver.schoolname.local it works.

BUT if I do nslookup from either the Mac or the Win server to resolve macserver.local it fails.

 

I think the iPads expect to see macserver.local.... ....I've tried telling the iPads to try via IP by putting in /mydevices but when you put the IP into safari it immediately changes the address bar to show macserver.local instead, I think this change gets forced as they connect to the Mac.

 

I've tried adding an alias in the Windows servers DNS but that hasn't seemed to help, and I've added an entry into the servers hosts file to point "macserver.local" at the IP for the Mac

 

You're right about the Trust Profile on the other tab at the MyDevices page, there is one of those and that seems to install OK but, I still need to hit enrol in order to make the iPads show up in Profile Manager.

Edited November 17, 2016 by superfletch
SPAG

[pyap]

Just wondering if you ever got this figured out? We're facing the same problem when trying to enroll. We get "Websites are turned off". Eventually we can get the enroll to attempt to install the profile but then it errors out.

 

Thanks

[Brimstone]

Thanks for both your replies.

 

I was on site this week and it doesn't say "Websites are turned off" any more - now when I hit enrol it moves forward a stage and tries to install a profile, but the profile fails to install - the message isn't helpful it just says "Profile Installation Failed".

 

I did a long support call with Apple but haven't got it resolved yet, the school has a Windows server which manages the DNS, the Mac points to this for its DNS.

NB - I didn't made any changes to this or to the Macs hostname between when it worked and when it broke, but there definitely seems to be an issue with DNS so I'm wondering how it worked in the first place.

 

The Mac has a hostname of macserver.local, but the FQDN should be macserver.schoolname.local, I've manually added a DNS record which reflects this.

 

When I do nslookup from either the Mac or the Win server to resolve macserver.schoolname.local it works.

BUT if I do nslookup from either the Mac or the Win server to resolve macserver.local it fails.

 

I think the iPads expect to see macserver.local.... ....I've tried telling the iPads to try via IP by putting in /mydevices but when you put the IP into safari it immediately changes the address bar to show macserver.local instead, I think this change gets forced as they connect to the Mac.

 

I've tried adding an alias in the Windows servers DNS but that hasn't seemed to help, and I've added an entry into the servers hosts file to point "macserver.local" at the IP for the Mac

 

You're right about the Trust Profile on the other tab at the MyDevices page, there is one of those and that seems to install OK but, I still need to hit enrol in order to make the iPads show up in Profile Manager.

 

You should not be using .local that's reserved on a Mac for Bonjour networking...