There's a new home for Articles. Find Articles on Our Product Support Page.
Hi! First of all: A SOTI case is open, but I would like to check, if anybody can help or experienced the same problem. :( Scenario: - MS (Windows Server 2012 R2)- 2x DS (Windows Server 2012 R2) Because of the Apple APNS change coming this November, we decided to add new machines (MS + 2x DS) with OS Windows Server 2016. We installed MC. Everything was running fine. So we decided to "turn off" the old MS and DS. When running only with "new" DS we discovered that only a few iOS devices are properly checking in to MobiControl clientlessly via APNS. When turning on one of the "old" DS, the check-ins are performed immediately. On ALL DS. So, in current state the "old" DS is still needed for checking in the Apple devices.:( Firewalls are open on all necessary ports (also 2195/2196 to Apple APNS service). We double checked this with Wireshark. Can you explain what's going on here? MC version: 14.4.1 Regards,Simon
Hi, Not sure if anyone running into the same thing. All of our iPhones have DEP enabled. According to Apple, with iOS 13+, during the initial start up, after scanning the "animation", the next page should be the "direct transfer" (https://support.apple.com/en-ca/HT210216). However, I have replaced 2 new iPhones but could not get this to come up, no matter what I tried. Google searches didn't give me any luck. I wonder if it is because of the DEP, just like Samsung Knox that prevents the convenient Smart Switch app? Any inputs are greatly appreciated. Thank you much!
We have a managed (DEP) iPhone - on the Device Statuses under Device Details, Supervised "yes" but Activation Lock "no". Therefore, I could not "Bypass Activation Lock" before wipe. Now, the phone is asking for the "Apple ID/pwd that were used to set up this phone". Are there any ways at all to get past this Activation Lock screen? All this time I thought that we would not hit this "blockage" if an Apple device was supervised, but I guess I was wrong. Any advice would be greatly appreciated. Thank you!
Hi We have to disable the "Prevent Cross-Site Tracking" in Settings > Safari in the iPhone. Right now we have to instruct our users to do it one by one. Is there a way to push this setting out to all enrolled iPhones in Soti? Thank you!
Has anyone else have this issue? I saw a KB article that the version we were on (14.4.4) can cause that so we updated to the latest build (15.1.2) and we still get the error. Also noticed this in the Management Service logs.
Would Mobicontrol have any impact on push notifications on the iPhone? We are using Application Run Control, but the app we want push notifications for would be on the allow list. Are there any other settings that are likely to block a push notification? I don't foresee any issues, however I do not have access to the device or software to test this to confirm. Thanks!
Hi, we have a few users that are enrolled through DEP. They have App Catalog pushed to their phones, in total we have about 5000 cell phones. 3 of them are unable to download apps from the catalog. They have a popup in App Catalog saying "application could not be installed at this time. Please contact your Administrator.user is connected to WiFi. We have factory reset the device, still unable to install the necessary apps. Any suggestions? Let me know if you need any further info iPhone 7 OS 13.5.1 App trying to install: Manadatory apps Cisco Any connect version through VPP is 4.6.03050 Skype for business VPP 6.22.3 Thank you,
Hello all, I have a customer on console version 14.4.9.1034 and they have an internally built application for which they always want the location services enabled. Right now we are manually configuring the setting and then locking out the ability to change it via the Content and Privacy restrictions in Screen Time on the device itself before sending the device to the end user. This causes a variety of issues and the customer is looking for a way to control this via Soti. My question is, does anyone know if a custom profile that can be built to control this setting just as it relates to this one app? To make it a little more complex, they are a mix of DEP and non-DEP iPhones and the iOS ranges from 11 to 13.
I'm using whitelist in application run control and I have been able to successfully whitelist a few apps, however one of the apps will not appear despite it being installed on the phone. Is there anything I can try to make this appear? Also, is it possible to force apps to appear on the first home screen? I've added some system apps and there appear here, however I have a webclip and this appears on the second screen.
Hello everybody, we do have some iPhones for our mobile workers that a close to boarders. We would like to force active roaming for all EU devices and if possible to stop them from deactivating it. The only Option i found is to disable roaming and stop the user from activating it again. SotiServer 14.2 I tryed the search function but this seems to be more of an Android topic so far?! Thank you very much. Kind regards Mika
Before I describe the issue I'm seeing, I'll mention that this doesn't feel like a problem within Soti but instead a problem with the information being returned to the iPad from Apple's Device Enrolment Program. I am attempting to use Apple Configurator 2 to enrol an iPad into our self-hosted Soti instance via the Device Enrolment Program. I was able to configure this correctly earlier this year but am now seeing a problem when the device attempts to be managed by the MDM. Our server configuration is hosted in our data center and looks like: one management server (MS) that is internal access only two deployment servers (DS1, DS2) that are public-facing; DS1 and DS2 are placeholders for the real FQDNs I've completed the configuration in MS: set up APNS set up Apple Device Enrolment Program set up Add Devices rule for iOS devices I've completed the configuration in Apple Configurator 2: Organization Server using URL of https://DS1 for URL trust certificate automatically set up for MobiControl Root CA manually added certificates for DigiCert Global Root G2 and GeoTrust TLS RSA CA C1 When I prepare the device, I use the following values: prepare with Manual Configuration Add to Device Enrollment Program Supervise devices (checked and greyed out) Allow devices to pair with other computers Enable Shared iPad the server that I configured earlier the organization that I configured earlier the defaults for Setup Assistant (MDM will control later) a valid WiFi profile There is no problem with the preparation of the device. It appears in Apple Business Manager and I can assign it to our Soti server. In Soti, I can sync the DEP devices and the device is properly assigned to my Add Devices rule. However, I am running into a problem when I complete setup on the devices. After sending a WiFi profile to the device, I can select language and country and the device then correctly shows the Remote Management screen. When I proceed with the enrolment, I see an error on the device indicating that the action was 'cancelled'. When I look in Console to see activity on the device, I see two things that look incorrect: the SSL negotiation fails with the message "Handle challenge, trust evaluation failed: “DigiCert Global Root G2” certificate is not trusted" the logged URL points to DS2 instead of DS1 from my server profile. the URL looks like https://DS2/mc/dep/none/enroll I had recently set up a server in Apple Configurator 2 for DS2 and did not include the trust certificates in its configuration. This makes me wonder if something in the Apple infrastructure is caching the incorrect information and sending it to the device during its setup. Of interest, I have set up a trial account with SimpleMDM and have been able to successfully enrol the device there. I have also done the following to try to correct this problem: removed all profiles and uninstalled/reinstalled Apple Configurator 2 removed the MDM server from Apple Business Manager and recreated it updated the Apple Device Enrolment Program information in Soti deleted and created a new Add Devices rule in Soti attempted to enrol a second device used the complete enrolment URL in the server configuration - e.g. https://DS1/Enrol/223 Any ideas about why my Soti enrolment is failing?
https://share.getcloudapp.com/2NuXvkZD Is there a support for Okta federated accounts with iOS BYOD (user enrollment) add device rules? It appears a single option with MS Azure directory.
Hi, i try to install the outlook app for iOS with an initial konfiguration so that the user only need to enter the password to use the app. i'm using the "configuration command" field and the following XML. <dict><key>com.Microsoft.Outlook.EmailProfile.EmailAccountName</key><string>company Exchange</string><key>com.Microsoft.Outlook.EmailProfile.Email</key><string>%ENROLLEDUSER_EMAIL%</string><key>com.Microsoft.Outlook.EmailProfile.EmailUPN</key><string>%ENROLLEDUSER_USERNAME%</string><key>com.Microsoft.Outlook.EmailProfile.ServerHostName</key><string>mail.company.com</string></dict> but i don't work...can anybody help with this?
Hi I wonder if someone could give me some help with an issue i am having. I have recently setup a byod policy for Apple devices where as i have setup:- Apple Business Manager connected it to our azure environment. added domain infomation VPP Profile APNS created managed Apple IDs for the devcies Enrolled devcies onto Soti Pushed down a web clip for download apps However I am struggling with the email configuration, I would like the devices to receive an email confuration so that the end user only needs to type in their user password however when the profile is uploaded to the devcie the only infomation passed over to the devcie is the mail server address which i manually typed into the profile. The domain infomation, User and email configuration do not appear to to hit the devcie. The settings i am using are:- Domain:- %ENROLLEDUSER_DOMAIN% User:-%ENROLLEDUSER_UPN% Email Configuration:-%ENROLLEDUSER_EMAIL% the vewrsion of mobicontrol i am using is: 15.0.1.1181 Regards Mark
Good Afternoon I need to create a profile for enrolling IOS devices into soti 15.0.1.1181 and have ran into an issue when attempting enrollment. The server is also configured with an active apns and Apple business manager connection. The device i am testing with is an IPhone 8 running 13.4.1 I have Created a new add device rule and selected user enrollment Selected Local Accounts Added the apple id for the device i am attempting to enroll into the managed Apple ID box Upon enrollment I then Download and install the first profile ok type in the apple id i had earlier typed into the managed Apple ID Box i then download and install the next profile I am then prompted to type in the password for the apple id after typing in the password i then receive the following error Verification Failed - This Apple ID is not supported please try signing in with a managed Apple ID. Can someone tell me what i am doing wrong! Thankyou
Top-tier experts who are delivering outstanding content. Should have more than 7000 points.
Experts who are consistent with great content. Should have more than 1000 points.
Highly experienced members with valuable inputs. Should have more than 700 points.
Beginners taking the initiative. Should have more than 500 points.
New contributors starting their journey. Should have more than 250 points.
