Profile manager not working

[nicholab]

I have had some Sophos UTM installed and profile manager has not updated the settings for the new proxy and certificate. How do you do a GP update on OD?

[aarongulley]

I have had some Sophos UTM installed and profile manager has not updated the settings for the new proxy and certificate. How do you do a GP update on OD?

 

Hi Sorry,

 

I just read your post? Do you mean Profile Manager isn't updating the macbook? Did you try re-enroll the macbook? Reboot and VRAM Reset

 

Thanks

 

Aaron.

[nicholab]

Profile manager is not updating the proxy setting so that the devices cannot connect to the internet.

[aarongulley]

Check that you can get out to the APNS push servers, you can do this by opening a Terminal and running:

telnet gateway.push.apple.com 2195

If you are then presented with "escape character is ^ " then you have sucessfully conencted to the Apple Push servers.

 

[nicholab]

Server can connect i take it the clients need to be able to as well. I have done telnet gateway.push.apple.com 2195 and telnet gateway.push.apple.com 2196 and I get escape character is ^.

[nicholab]

I can get to 2196 on the clients. Edited April 21, 2017 by nicholab

[aarongulley]

That's good. Did you try a PRAM reset? If possible can you try re-enroll the macbook or iPad and let me know? If that doesn't fix it change another setting like set a homepage or wallpaper and see if the settings change.

 

Cheers,

 

Aaron.

 

 

 

 

I can get to 2196 on the clients.

[nicholab]

I have tested the following ports and they have all worked.

 

$ telnet 1-courier.push.apple.com 5223

$ telnet gateway.sandbox.push.apple.com 2195

$ telnet gateway.push.apple.com 2195

 

What is a PRAM reset?

[aarongulley]

I have tested the following ports and they have all worked.

 

$ telnet 1-courier.push.apple.com 5223

$ telnet gateway.sandbox.push.apple.com 2195

$ telnet gateway.push.apple.com 2195

 

What is a PRAM reset?

 

A PRAM reset clears all of the cache within the RAM. Please follow the steps below to preform a PRAM reset.

 

1. Shut down your machine. Yes, all the way down, not sleep or logging out.
   
2. Press the power button and then press command-option-p-r. You have to make sure you get those keys pressed before the gray screen comes up or it won’t work.
   
3. Hold those keys down until your Mac reboots again and you here the startup chime.
   
4. Let go of the keys and let your Mac reboot normally.
   

If that doesn't work, you will need to re-enroll your macbook. If the device is an iPad you can try a hard-reset which is "Holding the home button and power button at the same time until you see the Apple Logo"

 

Best wishes,

 

Aaron.

[nicholab]

I did try this but it did not seem to make any difference. What port need opening from the firewall and which address should not go through the proxy?

[nicholab]

Please could somebody list their firewall and proxy exceptions for that they have put in place for apple masculines to be able to get profile manager updates?

[nicholab]

I have used the apple push notification test on the server and the app says that push works why have apple made such a mess of how this works?

[aarongulley]

Please give this a try

 

sudo defaults write /Library/Preferences/com.apple.apsd APSWriteLogs -bool TRUE

sudo defaults write /Library/Preferences/com.apple.apsd APSLogLevel -int 7

sudo killall apsd

[nicholab]

I pretty sure this is working now as if I look at profile manager I see push setting dated for yesterday as a completed task. I replied the profile manual and this has added a remote management profile to the machines.