iPhone Profile fails to install

Solved

I'm just getting to grips with MobiControl - using 15.6 on a cloud-hosted platform.

I've set up App Store license management, APNS and ADE. I've created an iOS profile, and I've added our custom app to the MobiControl App for iOS Devices profile.

Having created the enrolment profile and attempted to enrol my iPhone, I get as far as installing the trust profile, enabling full trust and downloading the enrolment profile. But this fails with "Profile installation failed - profile failed to install". Not the most helpful error message.

Hope someone can help, please.

Thank you.

2 years ago
iOS
ANSWERS
RC
Raymond Chan Diamond Contributor
2 years ago

Choosing enrollment mode(s) of an Apple device, namely user enrollment vs device enrollment, supervised versus un-supervised, with or without ADE/DEP via Apple ABM/ASM, using managed or personal AppleID, etc. are options available in an Apple enrollment policy.  Please provide details on your use-case requirements and limitations, so that any appropriate advice on how to properly enrol can be given.

Solution
JK
James Knight
2 years ago
Enrollment Type: User Enrollment
Default Rule: Yes
User Authentication Options: None
Managed Apple IDs: Local Accounts
Certificate Authentication Authority: Internal MobiControl CA
 
Policy log:
 
Authorization granted by DUAS with auth session id yyy for enrollment session id xxx.
 
Successfully retrieved certificate profile from enrollment session xxx.
 
Management profile has been successfully generated for User Enrollment session ID 'xxx' with DUAS authentication session ID 'yyy'.
 
Management profile has been successfully sent to the device with ID 'zzz'. User enrollment session ID 'xxx' and DUAS authentication session ID: 'yyy'.
 
What else can I tell you?
 
Thank you
 
James
RC
Raymond Chan Diamond Contributor
2 years ago

Have you used any MDM/EMM solution other than Soti MobiControl to manage any Apple devices in the past?

Are your devices owned by your company or by employees?

Are the devices to be enrolled brand new devices? Or are they old (already deployed) devices but with no user-data to be backed-up/restored if factory reset? 

What kind of MDM policies do not need to be deployed on the targeted devices?  Do you need to use any of the advanced policies only available in supervised mode?

Is each of the target device to be used by a particular person for an extended period of time?  Or to be shared by different people at different time?

Do you have any idea what is managed Apple ID?   Have you done any AD/LDAP integration on your MobiControl cloud server?

JK
James Knight
2 years ago

Thank you for your questions. The one which helped me the most was "have I used any MDM solution in the past". In fact, I had, but I'd forgotten about it because it was useless.

Having removed Sophos MDM from my iPhone, I was able to complete the enrolment.

Thank you!

James

M
MNMOD@SOTI
2 years ago

Hi James,

Thank you for posting on SOTI Pulse!

Could you try deleting the profiles on the device or factory resetting the device and then re-do the installation. Are you doing this with the agent or agentlessly?

Have you heard? SOTI SYNC is back – this time in Munich, Germany! Save the date – 26th-28th September 2023.

Meet the experts in enterprise mobility management, mingle with peers, join our training sessions, and have fun! #SOTISYNC2023

Kind regards,

Technical Support Specialist | SOTI | +1 905.624.9828 | SOTI.net l Discussion Forum | Log a Case Online l Facebook l LinkedIn l Twitter