Mrpower Posted June 5, 2020 Posted June 5, 2020 Hello All I have been trying, in vain, to get our MDM server to work. At the moment when I enrol a device I am told that the SCEP server has an error. The address for the SCEP server, (http://serveraddress.local:80/mdm/scep) tells me that there is a INTERNAL SERVER ERROR (very helpful). With some research I am guessing it has something to do with Certificates or it could be DNS, remembering the last time it did something like this. I also remember hearing something about OSX 10.15 and server 5.10 having a certificate issue. Yesterday I did restore it back to a time when it was "working", alas the issue was back this morning. Any help would be gratefully received, as I am sick of pulling my hair out.
Brimstone Posted June 5, 2020 Posted June 5, 2020 (edited) Let me guess...this is profile manager? Can be caused by a number of issues.. Network...can you try and enroll an iPad using a hotspot phone? Ports used...Likely you are blocking Port 80 https://support.apple.com/en-gb/HT202487 The SSL Cert you have is not correct... https://support.apple.com/en-gb/HT204132 Edited June 5, 2020 by Brimstone
Mrpower Posted June 5, 2020 Author Posted June 5, 2020 Yes it's profile manager. Alas I would like it to be working over the internet, but at the moment it's all internal, working over the local lan. It would be more useful to be pushing over the internet, especially during these lock down days. Everything being internal local lan is a hang over from my predecessor.
Primus Posted June 5, 2020 Posted June 5, 2020 The advice will always be don't use Profile Manager - use a proper MDM.
Brimstone Posted June 5, 2020 Posted June 5, 2020 Yes it's profile manager. Alas I would like it to be working over the internet, but at the moment it's all internal, working over the local lan. It would be more useful to be pushing over the internet, especially during these lock down days. Everything being internal local lan is a hang over from my predecessor. You can not enrol iPads with the MDM only being local.end of.
Mrpower Posted June 5, 2020 Author Posted June 5, 2020 (edited) Well its been set up this way for sometime now without issue and was enrolling iPad, MacBook, and iMacs happy up until march. I enrolled a iPad yesterday with no issue. then this morning nope. the logic of this makes no sense. I have just tried to enrol an iPad and a MacBook and both enrolled fine. another MacBook nope. going to try to work out what's different about the two devices. Edited June 5, 2020 by Mrpower
computer_expert Posted June 5, 2020 Posted June 5, 2020 (edited) Not the money in the budget to do that ATM. Mosyle MDM and apple school manager (for DEP enrolled devices) are both free I think. Profile manager is a pain in the arse once it stops working. Do the problematic devices have the profile manager Root CA certificate imported? Are the server's certificates still valid? I think you can check this in one of the top sections of the server app (It's been a while since I last used a mac server so can't remember the correct terminology) Edited June 5, 2020 by computer_expert
Mrpower Posted June 5, 2020 Author Posted June 5, 2020 (edited) I should have noticed, "slap head". Check what I have newly installed, is not blocking access to websites / server. It occurred to me that the new anti-virus software might be the problem. Low and behold ESET anti-virus was blocking access. Still Profile Manager is still a pain. OSX Server is defiantly worth all of the £19 that you pay for it. Grumble Grumble, bloody...... Edited June 5, 2020 by Mrpower
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now