Security certificate on Meraki MDM

[Smee]

Our ISP issued a new security certificate for our network . I've added it to our MDM but our ipads no now longer connect to the wireless. All I did was follow the Add certificate bit in Meraki and uploaded the certificate from the ISP. Didn't do anything else. Would you say its that that has thrown the ipads off or am I suppose to add the new certificate to our wireless somewhere? (we have a ruckus wireless network)

As far as I'm aware our actual network is fine and the new certificate is working fine.

Thanks for any advise I'm at my wits ends with this particular problem

[Koldov]

Don't know if I can actually help here, but this was my attempt to help someone put a certificate on an iPad (it also links my original thread):

 

http://www.edugeek.net/forums/internet-related-filtering-firewall/222954-smoothwall-certificate-via-meraki.html

 

Can you get hold of an iPad to see if the new cert has installed?

 

Also I wonder if this setting makes a difference...

 

 

Just shooting in the dark here really... How did the original cert get installed?

[tmoon-mint]

Are the iPads supervised? If not you may need to trust the new certificate. You do so in Settings > General > About > Certificate trust settings

[Smee]

Are the iPads supervised? If not you may need to trust the new certificate. You do so in Settings > General > About > Certificate trust settings

 

Thanks for the response. The Ipads are supervised.

[Smee]

Don't know if I can actually help here, but this was my attempt to help someone put a certificate on an iPad (it also links my original thread):

 

http://www.edugeek.net/forums/internet-related-filtering-firewall/222954-smoothwall-certificate-via-meraki.html

 

Can you get hold of an iPad to see if the new cert has installed?

 

Also I wonder if this setting makes a difference...

 

[ATTACH=CONFIG]63281[/ATTACH]

 

Just shooting in the dark here really... How did the original cert get installed?

 

 

Thanks for the reply. I can't see the new certificate on an ipad. when you say how did the original cert get installed do you mean on the network? it was installed by me following the instructions from our ISP. On the MDM I just installed it in the Certificate bit of the profile uploading it from my network.

[Koldov]

Thanks for the reply. I can't see the new certificate on an ipad.

 

OK, so I'm going to jump in here and say that it would seem that the certificate change (for your network) was done before the iPads were given their certificate, so they would have lost the Wi-Fi connection before the MDM could deliver it.

[Smee]

OK, so I'm going to jump in here and say that it would seem that the certificate change (for your network) was done before the iPads were given their certificate, so they would have lost the Wi-Fi connection before the MDM could deliver it.

 

Yep I think you are right. I've tried adding the wifi to a couple of the ipads even with manually putting the proxy in but makes no difference.

[atcoates]

Can you get the Ipads into your location and create a new guest wireless network with a passcode, but needs to be something that will get on the internet without the certificate that you can quickly connect to.

 

That should at least get the ipads on the internet so they can download the profile. if you then turn off the new wireless network they should then reconnect to the correct wifi and should have the certificate installed and should then work.

 

Obviously, this depends on how many ipads you have etc.

Edited October 5, 2021 by atcoates

[Koldov]

Thanks for the reply. I can't see the new certificate on an ipad. when you say how did the original cert get installed do you mean on the network? it was installed by me following the instructions from our ISP. On the MDM I just installed it in the Certificate bit of the profile uploading it from my network.

 

Ah no, going from your OP I saw that it was a 'new' certificate...

 

Our ISP issued a new security certificate for our network .

 

...and therefore presumably there was an 'old' certificate, so I just wondered how that was deployed to your iPads originally (MDM, AC)?

[Smee]

just to update, I've ended up making new profile on Meraki for the new certificate. Once I've manually put the proxy settings in I've had to re-enrol the ipads on to Meraki, allocate the new profile and we seem to be backup and running. It's been a total pain and taken too long but at least they are back up and being used.

I'm going to have a look at were I can put the proxy settings so that they don't get wiped off each ipad again.

thanks for all your suggestions its been really helpful.

[tmoon-mint]

just to update, I've ended up making new profile on Meraki for the new certificate. Once I've manually put the proxy settings in I've had to re-enrol the ipads on to Meraki, allocate the new profile and we seem to be backup and running. It's been a total pain and taken too long but at least they are back up and being used.

I'm going to have a look at were I can put the proxy settings so that they don't get wiped off each ipad again.

thanks for all your suggestions its been really helpful.

 

Strange that you had to re-enroll. Is it possible your APNS certificate could have expired at some point?

[Smee]

Strange that you had to re-enroll. Is it possible your APNS certificate could have expired at some point?

 

I did wonder about that but it wasn't a re-enrol on all of them, so were ok.

[howartp]

You can have multiple profiles assigned to an iPad through Meraki. We do have his so exchange activesync credentials don’t keep blanking out.