SOTI Pulse Logo

Tablet Unitech tb85 - Enrollment failed. Please retry or contact your system administrator.

M
MICZY
Danish Crown AS

After update SOTI to version: 2024.0.0.1075 I can't enroll tablet Unitech TB85 (android 8). 

Error form Diagnostic Deployment Server Extension Log


[2023-12-07 14:02:15.721] DEBUG [Android RESTful Enrollment] (177): e974faf7-ff8b-40bb-abdb-f3d87ba2bfd8 TB85 7ce6ee86-743f-4360-b5c9-cfac66cc241a Android enroll request { AddDeviceRuleId = , EnrollmentPolicyPin = , AddDeviceRuleTag = 3EEB54A4-D9F8-F23C-1831-B2DFDBD9125F, DeviceNameFromIniFile = , AgentUniqueId = e974faf7-ff8b-40bb-abdb-f3d87ba2bfd8, AuthenticationToken = , AcceptedTermsAndConditionsUrl = , IsDeviceGmsCertified = True, IsOemAgent = True, AndroidBuildVersion = 26, DeviceIp = 10.82.136.109, DeviceFirmwareVersion = , DeviceId = 351957100075379, BluetoothMac = 98AAFC23C7DB, WifiMac = 98aafc23c939, Mac = 98AAFC23C939,
SerialNumber = 351957100075379, HardwareSerial = 19a1cc96, Oem = k-touch, Model = TB85, safetyNetAttestationStatement = , safetyNetAttestationErrorMessage = , playIntegrityAttestationStatement = , playIntegrityAttestationErrorMessage = }
[2023-12-07 14:02:15.721] DEBUG [Android RESTful Enrollment] (177): e974faf7-ff8b-40bb-abdb-f3d87ba2bfd8 TB85 7ce6ee86-743f-4360-b5c9-cfac66cc241a CheckIfCopeProvisioningRequired begins Android41Enterprise isCope:True BuildVersion:26
[2023-12-07 14:02:15.721] DEBUG [Android RESTful Enrollment] (177): e974faf7-ff8b-40bb-abdb-f3d87ba2bfd8 TB85 7ce6ee86-743f-4360-b5c9-cfac66cc241a CheckForCompatibleAgent begins
[2023-12-07 14:02:15.721] DEBUG [Android RESTful Enrollment] (177): e974faf7-ff8b-40bb-abdb-f3d87ba2bfd8 TB85 7ce6ee86-743f-4360-b5c9-cfac66cc241a CheckForAllowedAgent begins { isOemAgent = True, androidBuildVersion = 26 }
[2023-12-07 14:02:15.721] DEBUG [Android RESTful Enrollment] (177): e974faf7-ff8b-40bb-abdb-f3d87ba2bfd8 TB85 7ce6ee86-743f-4360-b5c9-cfac66cc241
a CheckForAllowedAgent { allowedAndroidType = All }
[2023-12-07 14:02:15.721] DEBUG [Android RESTful Enrollment] (177): e974faf7-ff8b-40bb-abdb-f3d87ba2bfd8 TB85 7ce6ee86-743f-4360-b5c9-cfac66cc241a CheckForAllowedAgent returns All
[2023-12-07 14:02:15.721] DEBUG [Android RESTful Enrollment] (177): e974faf7-ff8b-40bb-abdb-f3d87ba2bfd8 TB85 7ce6ee86-743f-4360-b5c9-cfac66cc241a CheckForAllowedAgent begins { isOemAgent = True, enrollmentPolicyKind = AndroidEnterprise }
[2023-12-07 14:02:15.721] DEBUG [Android RESTful Enrollment] (177): e974faf7-ff8b-40bb-abdb-f3d87ba2bfd8 TB85 7ce6ee86-743f-4360-b5c9-cfac66cc241a CheckForAllowedAgent enrollment canceled AndroidEnterprise
[2023-12-07 14:02:15.721] ERROR [General] (177):
****************************************
* Exception: Error in the application. *
****************************************
[DeviceCanNotBeEnrolledWithEnrollmentPolicyException: Error in the application.]
at Soti.MobiControl.DeviceEnrollment.Android.Implementation.EnrollmentManagemen
tService.CheckForAllowedAndroidType(Boolean isOemAgent, Boolean isWorkManagedType, EnrollmentPolicyKind enrollmentPolicyKind, String failLog)
at Soti.MobiControl.DeviceEnrollment.Android.Implementation.EnrollmentManagementService.ValidateDeviceSnapshot(AndroidDeviceSnapshot deviceSnapshot, AndroidEnrollmentPolicy androidEnrollmentInfo, EnrollmentPolicyKind enrollmentPolicyKind, SafetyNetAttestationResult& safetyNetAttestationResult, PlayIntegrityAttestationResult& playIntegrityAttestationResult, AttestationEventStatus& attestationEventStatus)
at Soti.MobiControl.DeviceEnrollment.Android.Implementation.EnrollmentManagementService.Enroll(AndroidDeviceSnapshot deviceSnapshot)
at Soti.MobiControl.DeviceEnrollment.Android.Web.Implementation.AndroidAgentEnrollmentController.Enroll(EnrollmentRequest enrollmentRequest)
at lambda_method(Closure , Object , Object[] )
at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ActionExecutor.<>c__DisplayClass10.<GetExecutor>b__9(Object instance, Obj
ect[] methodParameters)
at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ExecuteAsync(HttpControllerContext controllerContext, IDictionary`2 arguments, CancellationToken cancellationToken)
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Web.Http.Controllers.ApiControllerActionInvoker.<InvokeActionAsyncCore>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Web.Http.Controllers.ActionFilterResult.<ExecuteAsync>d__2.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatc
hInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Web.Http.Controllers.ExceptionFilterResult.<ExecuteAsync>d__0.MoveNext()
****************************************

Error form Deployment Server Logs

Device enrollment failed. Devices can only enroll with the AE Agent. 

Deployment Type is set up 'OEM Specific for All Android Devices'.

TB85 are enorolled with Unitech TB85 agent.

Android Enterprise does not work on this device.

On TB85 enrolled befor upgrade SOTI I can't upgrade agent. Old agent version 15.0.1.1051. New version 15.4.5.1051. In logs I have 'Invalid device software version'.

a year ago
Android
ANSWERS
ZC
Zafer Cigdem
a year ago

Hi,

You are using afw#mobicontrol method, right? I just saw that your OS is higher than OS6, and your agent version is also 15+

1. Did you face this issue on only some of your one/few of your devices or all of them for same make/model?

2. You can try to create a new enrollment Policy and test it again, for test purpose you may enable below section to verify whether any differences. 

 

3. Can you try to enroll this device via QR code as AE by using the old agent version to narrow down the problem?

4. Did you manage to enroll any other devices as AE after the MC server upgrade?

Zafer

RS
Rafael Schäfer
a year ago

If the device doesn't support Android Enterprise you may need to use an Android Classic enrollment policy.

ZC
Zafer Cigdem
a year ago

If I understand well, he said that he can enroll as AE before the upgrade at his last paragraph. But for sure, trying to enroll as a classic would be another option.

RS
Rafael Schäfer
a year ago

I was not sure if he meant upgrade of the server or the agent itself as he could choose which agent to be used (if not using Google Zero-Touch) for enrollment (for example: in enrollment QR).

But as he is showing the DS logs, i assume the server has been upgraded.

And as far as i have seen, this device is not Android Enterprise Recommended, this could be also generate problems.

RC
Raymond Chan Diamond Contributor
a year ago

Have you tried device enrollment using enrollment URL rather than enrollment ID?

S
SGMOD@SOTI
a year ago

To address the issue, you can try enabling the option to enroll the device even if the Play Integrity attestation fails. Please proceed with enabling this option and let us know if it resolves the problem.

S
SMMOD@SOTI
a year ago

Hi Miczy,

I hope the suggestions provided by Raymond, Zafer, Rafael, and Saksh have helped you answer your query. Please inform us if you require further assistance. 

Additionally, if any response has helped address your inquiry, we kindly request you to mark it as "is solution" so that others may also benefit from this information.

Thank you, Raymond, Zafer, Rafael, and Saksh for your valuable suggestions.

Thank you for choosing SOTI.

Similar Discussions