Apple Push Certificate Expired - Mac Server

[geohanson]

Hi all,

 

Our Apple Push Certificate has expired and profile manager is no longer pushing out settings as it should do.

Most of the student accounts I have just created (2 months ago) have no restrictions applied...

 

The strange thing is that the restrictions have applied successfully to a few of the accounts (so Profile Manager is telling me)

 

Will setting up a new certificate and importing it into the server solve the problem? I will have to use a new Apple ID as I don't have access to the account that the Mac Server was originally set up with.

How do I re-enroll all the Macs after I have done this? We only have about 20 Macs, so if I need to manually visit each one thats no big problem. Is it as simple as visiting 'servername.local/mydevices' and re enrolling from there?

 

We are still running 10.9 should that make any difference.

 

Any comments/help would be greatly appreciated!

[aarongulley]

Hi all,

 

Our Apple Push Certificate has expired and profile manager is no longer pushing out settings as it should do.

Most of the student accounts I have just created (2 months ago) have no restrictions applied...

 

The strange thing is that the restrictions have applied successfully to a few of the accounts (so Profile Manager is telling me)

 

Will setting up a new certificate and importing it into the server solve the problem? I will have to use a new Apple ID as I don't have access to the account that the Mac Server was originally set up with.

How do I re-enroll all the Macs after I have done this? We only have about 20 Macs, so if I need to manually visit each one thats no big problem. Is it as simple as visiting 'servername.local/mydevices' and re enrolling from there?

 

We are still running 10.9 should that make any difference.

 

Any comments/help would be greatly appreciated!

Hi,

Once you've successfully renewed the certificate make sure the code signing certificate isn't going to expire. You may need to reselect the new certificate within Profile Manager under the Server app.

 

Sadly you will need to re-enroll these manually unless you have a deploystudio where you can automate it using a workflow.

 

http://[macserver.domain]/mydevices it's best practise to put these devices within a group then apply settings to the group.

 

 

Thanks

 

Aaron.