[ipad] AC2 - profile error

[Koldov]

So, I've messed up on the iPads (again) and I can't see an easy way around it!

 

We have Meraki Systems Manager and I was trying some settings out, I thought it was a great idea to tick 'Enforce SSID whitelisting iOS 10.3+'...

 

It came with a warning that "Devices may only connect to networks that were set up in a configuration profile"

 

That's OK I thought, I have the Wi-Fi settings including SSID in the 'Meraki profile configuration'.... well 10 minutes later and all the iPads went offline...

 

Now, Meraki is no good to me anymore as none of the iPads are connected to the network/internet anymore and there is no option to join them manually as the iPads now say something like 'Your iPads can only join Wi-Fi networks configured by your Administrator'!

 

Thought I would check and nearly all the iPads have the Meraki profile with Wi-Fi settings in but it isn't doing anything, I looked at them with AC2 and there is one other iPad that has a Wi-Fi profile and this is still OK...

 

However I can't find any way to export that profile from the iPad to apply to the others, but that might not even work as even though I do have a Wi-Fi profile saved on the Mac, when I try to apply it with AC 2 it gives me the cryptic error:

 

The profile must be installed using a device management tool. [MCInstallationErrorDomain – 0xFB4 (4020)]

 

 

Which I can only find one hit on the internet for that search term and Apple failing to answer with anything but 'look at how to install profiles with Configurator'...

 

https://discussions.apple.com/thread/253857755

 

Now nobody can use iPads and I'm not looking forward to tomorrow...

Edited December 5, 2022 by Koldov

[lmgtfy]

I think a potential way around this is with a lightning to ethernet adapter to temporarily give them internet access back so you can update your profile. Good luck Edited December 5, 2022 by lmgtfy

[mrstrong]

also when an ipad is plugged into your Mac via usb you can share your internet connection (ipad USB) so that might help ?

(i.e. to push out correct settings over wired usb)

Edited December 6, 2022 by mrstrong

[tmoon-mint]

I think a potential way around this is with a lightning to ethernet adapter to temporarily give them internet access back so you can update your profile. Good luck

 

Depends what version of iPadOS the device is on. Newer versions require you to unlock the device to use accessories like a lightning to ethernet adapter. Wipe and reload sounds like the only way unfortunately.

[Koldov]

I think a potential way around this is with a lightning to ethernet adapter to temporarily give them internet access back so you can update your profile. Good luck

 

Thanks, unfortunately we don't have one and I don't have time to order one, but it did work through the USB to the Mac-Mini with internet sharing!

 

Depends what version of iPadOS the device is on. Newer versions require you to unlock the device to use accessories like a lightning to ethernet adapter. Wipe and reload sounds like the only way unfortunately.

 

Luckily these are older iPads, but I still had some issues with the wipe and reload... something is not quite set-up the way it should be and I think it may need some looking at. I kind of expected a zero touch experience but when wiped it came back with activation lock and I couldn't clear that from Meraki Systems Manager.

 

With AC2 wiped it, created a Blueprint I put the Meraki SM profile on and a Wi-Fi profile from the 1 good iPad I had, even did it as a restore from back-up of good iPad (but later found the 'back-up didn't actually have anything in it), but when it restarted it just ignored it all every time and set-up as a new iPad (but with activation lock meaning I had to manually input an apple account)... I don't know if the AC2 configuration/profile error is because they are managed by Meraki now, but it just seems really messy. The iPads are also in ASM as well, so I figure if I can get a Wi-Fi config file on in AC2 then it should just all happen automagically, but it isn't... They don't even auto-join the Wi-Fi...

 

also when an ipad is plugged into your Mac via usb you can share your internet connection (ipad USB) so that might help ?

(i.e. to push out correct settings over wired usb)

 

Virtual beer awarded!

 

I found this out myself luckily, early in the day yesterday...

 

I went through the various options of getting one of the sync and charge trolleys unlocked from the wall in a classroom, emptying 30 iPads and up a few stairs to my office, setting up the Mac-Mini, but instead just decided to move the Mac-Mini and do 2 at a time.... so I plugged the first 2 in... I'd resigned myself to doing this for most of them anyway as for some reason they were previously refusing to update over Wi-Fi anyway and AC2 seemed to able to do it.

 

While I was messing about with the first one and getting nowhere, by the time I'd got to the second one it had already just picked up the new Meraki profile itself and reverted to being able to join any Wi-Fi (but defaulting to the one set out in the profile). So the next time I just plugged 2 in and waited... sure enough after a little bit of poking and the odd restart, one by one they started to pick up the changed profile!

 

I did have 'share with USB' already ticked in the 'Content Cache' part of the sharing settings... I looked at just the sharing part but got put off by the warnings of 'This could bork your WHOLE NETWORK and your ISP might block you'....

 

So, it took me all day and lesson learned (until I forget and do something similarly stupid)... Every day is a school day...

Edited December 7, 2022 by Koldov