Niker 0 Posted June 28, 2019 Share Posted June 28, 2019 Hello Guys I want to try eset MDM for IOS product, but I have a problem. on android all works fine, but I can't make an enrollment to iOS devices (iPhones). I did all what is inside the admin's doc. I've made the APNS cert at apple, and the DEP cert too. like this :https://support.eset.hu/kb6368/?viewlocale=en_US and this : https://help.eset.com/esmc_admin/70/en-US/apn_certificate.html In the log file is : 2019-06-28 09:52:22 W [14036] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:03:06 W [68] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:03:09 W [1540] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:04:17 W [14036] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:04:18 W [1540] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:04:19 W [14036] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:04:19 W [1540] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:04:19 W [14036] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:04:19 W [1540] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:05:17 W [14036] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:06:37 E [1540] Uncaught exception: NodSslException, NodSSL error occurred in completeHandshake.RecvEncryptedData (Handshake failed to complete). Local: [::ffff:10.10.4.40]:9980 Peer: [::ffff:89.132.150.85]:63928 2019-06-28 10:06:37 W [14036] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:06:40 E [1540] HTTP: Request GET:/e6m8shbj4, source: [::ffff:89.132.150.85]:63932 denied. Reason: Enrollment with an invalid URL token (6m8shbj4) has been detected, denying. 2019-06-28 10:06:41 E [14036] HTTP: Request GET:/e4k4rnx6q, source: [::ffff:89.132.150.85]:63934 denied. Reason: Enrollment with an invalid URL token (4k4rnx6q) has been detected, denying. 2019-06-28 10:07:06 E [14036] Uncaught exception: NodSslException, NodSSL error occurred in completeHandshake.RecvEncryptedData (Internal error in the underlying implementations). Local: [::ffff:10.10.4.40]:9980 Peer: [::ffff:89.132.150.85]:63941 TLS protocol: SSL: error:1408F09C:lib(20):func(143):reason(156) 2019-06-28 10:07:06 E [1540] Uncaught exception: NodSslException, NodSSL error occurred in completeHandshake.RecvEncryptedData (Internal error in the underlying implementations). Local: [::ffff:10.10.4.40]:9980 Peer: [::ffff:89.132.150.85]:63942 TLS protocol: SSL: error:1408F09C:lib(20):func(143):reason(156) 2019-06-28 10:07:06 E [14036] Uncaught exception: NodSslException, NodSSL error occurred in completeHandshake.RecvEncryptedData (Internal error in the underlying implementations). Local: [::ffff:10.10.4.40]:9980 Peer: [::ffff:89.132.150.85]:63943 TLS protocol: SSL: error:1408F09C:lib(20):func(143):reason(156) 2019-06-28 10:07:21 W [1540] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:11:41 W [14036] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:11:43 W [1540] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:11:44 W [14036] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:13:10 S [444] Status: Version: 7.0.416.0 CertManager: no change in progress AsioTcpInstance.Count: 0 License: Active: true Expiration: 2021-Feb-12 12:00:00 HTTP (enrollment): Attempted connections: 26 HTTP (mdm): Attempted connections: 0 AgentConnector: Attempted connections: 0 Completed connections: 0 Clean disconnections: 0 AdminConnector: Connected: true AgentManager: Total active agents: 0 Agents rotated since last report: 0 2019-06-28 10:39:05 W [1540] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:39:07 W [14036] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:39:08 W [1540] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:41:26 W [14036] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:45:55 W [1540] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:45:56 W [14036] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:46:31 W [1540] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:46:32 W [14036] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:46:33 W [1540] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:49:52 E [1540] HTTP: Request GET:/enrollment, source: [::ffff:89.132.150.85]:64000 denied. Reason: Enrollment with an invalid URL token (nrollmen) has been detected, denying. 2019-06-28 10:50:19 E [14036] HTTP: Request GET:/enrolment, source: [::ffff:89.132.150.85]:64004 denied. Reason: Enrollment with an invalid URL token (nrolment) has been detected, denying. 2019-06-28 10:53:06 E [1540] HTTP: Request GET:/enrollment, source: [::ffff:89.132.150.85]:64006 denied. Reason: Enrollment with an invalid URL token (nrollmen) has been detected, denying. 2019-06-28 10:53:06 W [14036] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:53:09 W [1540] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. 2019-06-28 10:57:16 W [14036] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent. I'm sure in the certifications are available , and they are in the right place. Please help me to solve this issue! Thanks, David Link to comment Share on other sites More sharing options...
ESET Staff Mirek S. 18 Posted June 28, 2019 ESET Staff Share Posted June 28, 2019 (edited) Hello, "2019-06-28 10:57:16 W [14036] Enrollment from iOS requested but no APNS certificate provided. Enrollment profile not sent." This means MDM does not have configured (or configuration failed to apply) APNS certificate. Ensure you have policy assigned to MDM and it's actually applied. You can check via Configuration -> Get on device on which MDM is installed. "AdminConnector: Connected: true" means connection between managing Agent and MDM works (it's the chanel policy is delivered over). If this is correct change something in policy (log level etc..). Agent sadly does not attempt to send policy multiple times, so it's possilble failed delivery attempt caused this state. If you can't figure out why policy isn't applied please contact support instead, we can't request relevant log files over forum. Please also check You meet HTTPS certificate requirements, they differ for Android and iOS. https://help.eset.com/esmc_install/70/en-US/mobile.html https://help.eset.com/esmc_install/70/en-US/?certificate_mdm_https_requirements.html https://support.eset.com/kb6368/#CreateMDMCert https://help.eset.com/esmc_install/70/en-US/?mobile_connector_installation_windows.html HTH, M. Edited June 28, 2019 by Mirek S. Link to comment Share on other sites More sharing options...
Recommended Posts