Invalid MDM Profile during enrollment

dnelson2813
Contributor

We usually enroll our iPads through DEP, but these were purchased through the Apple outlet and Apple said they are not eligible for DEP enrollment because of that. (They're claiming they can't put the order under our customer number for DEP to work) So I have tried enrolling them with the Apple Configurator and with User Initiated Enrollment. In both situations, I get an error saying the MDM Profile is Invalid.

I checked the date and time and trusted the certificate in Settings->About->Certificate Trust Settings. I also followed the instructions here: https://www.jamf.com/jamf-nation/articles/192/mobile-device-enrollment-error-invalid-profile-or-invalid-certificate and restarted tomcat. Nothing I have found has worked. The Configurator says Profile Installation Failed - Invalid Profile [MCInstallationErrorDomain - 0xFA1 (40010].

Does anyone have any ideas?

1 ACCEPTED SOLUTION

jared_f
Valued Contributor

Instead of using User Initiated Enrollment, why not just enroll the devices into DEP with Apple Configurator 2 - there will be a 30 day period until the MDM profile becomes fully mandatory, but it seems that is what you are trying to achieve. Here is a guide I am sure you could adapt to your Jamf instance.

https://simplemdm.com/2017/09/28/ios-11-dep-apple-configurator-2-5/

View solution in original post

4 REPLIES 4

jared_f
Valued Contributor

Instead of using User Initiated Enrollment, why not just enroll the devices into DEP with Apple Configurator 2 - there will be a 30 day period until the MDM profile becomes fully mandatory, but it seems that is what you are trying to achieve. Here is a guide I am sure you could adapt to your Jamf instance.

https://simplemdm.com/2017/09/28/ios-11-dep-apple-configurator-2-5/

dnelson2813
Contributor

I'll take a look. Thanks.

dnelson2813
Contributor

You're a god send. I was using an old version of Configurator and didn't know that was an option so I updated, tried it and it worked.

jamesandre
Contributor

I had the same error, but mine was a different issue. Basically, I just made a stupid mistake.

I had already use Apple Configurator to enrol some AppleTVs, I was using the AppleTV Blueprint to try and enrol some old iPhones and was getting that profile error.

I made a new enrolment profile in Jamf and a new Blueprint in Apple Configurator and everything worked.

Hopefully that is useful to someone.