MDM/Profile Manager Problems

[mezmerrick]

Hi Everyone.

 

I'm having some trouble with my MDM setup. I have a 10.7.4 Server with Profile Manager configured.

 

When I try to enrol a client Mac, I install the Trust Certificate followed by the Management Certificate. I can see in the Console applepushservice(304) errors - failing to reach https://albert.apple.com

 

I have repeatedly contacted my ISP (SWGfL) and had the following ports opened from our IP ranges to our MDM server and Apple's services, but i'm still getting failures.

 

TCP port 2195 (APNS)

TCP port 2196 (APNS)

TCP port 5223 (APNS)

TCP port 1630 (SCEP)

TCP port 443 (HTTPS)

 

Anything i've missed? Any ideas much appreciated!

[Rozzer]

If I was being honest I have not had the best of luck with profile manager and mangaging mac clients. Me and another Apple certified technician have given up on it and gone back to work group manager for Mac client administration.

 

Ross

[JR-PCS]

As Ross has already said, for Mac management Profile manager is still not very good, even with unfiltered internet. However if you want to manage iPads I can see why you may want to use it. Have you tried using a site such as Firebind Inc. to check your ports are indeed open.

 

By the way I presume your Simon? Not sure if you remember me? I set up the first load of macs with you in your music dept all those years ago. Hope your well?

[Rozzer]

For MDM this is worth a read http://www.edugeek.net/forums/netbooks-pda-phones/101017-mdm-solution-free-worth-looking.html#post869336

 

Ross

[mezmerrick]

As Ross has already said, for Mac management Profile manager is still not very good, even with unfiltered internet. However if you want to manage iPads I can see why you may want to use it. Have you tried using a site such as Firebind Inc. to check your ports are indeed open.

 

By the way I presume your Simon? Not sure if you remember me? I set up the first load of macs with you in your music dept all those years ago. Hope your well?

 

Hi John, Yes, it is I! Small world huh?! We've come a long way since those first Macs we had in our music dept - it seems so long ago! Now we have a huge influx of iPads! To the point where I need to get a good management solution in place sooner rather than later. I will check out the Firebind website tomorrow at work and see if I can find anything unusual!

 

For MDM this is worth a read http://www.edugeek.net/forums/netbooks-pda-phones/101017-mdm-solution-free-worth-looking.html#post869336

 

Ross

 

Thanks, Ross. Will check this out.

[mezmerrick]

The Firebind site said that some of the ports I requested are actually closed. I will check again with the SWGfL, but also with my LEA to check our local firewall isn't blocking them.