Custom Apple Profiles not working anymore

[GavinW]

In the last couple of days I have noticed that my custom apple profiles for iOS and macOS no longer work. They have been working since I uploaded them several months ago. Both are WiFi profiles created in Profile Manager containing Wifi & Certificates for Enterprise 802.1x authentication.

Manually installing the respective profiles on a macOS and iOS device works successfully, and connects to the wifi network. I can upload the files to Systems Manager as a custom Apple profile, but on iOS it gives the error: 

Code: 1000

Domain: MCProfileErrorDomain

Error: The profile “Settings for All.IOS Wifi Config Profile” is invalid.

Error: The payload “Settings for All.IOS Wifi Config Profile” is invalid.

Error: The field “PayloadContent” is invalid.

And on macOS it gives the error:

Code: -50

Domain: ConfigProfilePluginDomain

Error: Error = -50

[adamw1]

I too get this error and its with an existing profile which was working not more than a month ago. I reckon its to do with the new custom profile update that was recently launched. 

[adamw1]

So I think I figured it out.

• I tried reuploading the profile which failed
• I tried adding new devices to obtain the profile which failed
• I tried an unsigned profile... it worked

See if an unsigned profile works for you

EDIT:

Maybe not, its certificates that cause it. I added a certificate to the profile and it broke!

[ohmm1]

I had the same problem.  I was able to get it working by installing the certs into my meraki generated profiles then on a mac running:

profiles list

find the profileid

profiles show profileid

Find the certificate required and grab the UUID

_computerlevel[1] payload[9] name = CertificateName
_computerlevel[1] payload[9] description = Credential
_computerlevel[1] payload[9] type = com.apple.security.pkcs1
_computerlevel[1] payload[9] organization = Meraki, Inc.
_computerlevel[1] payload[9] identifier = com.meraki.sm.credential

_computerlevel[1] payload[9] uuid = c59e77b0-3ea7-0137-75cd-6d6572616b69

Remove the certificates from the .mobileconfig and paste the UUID into the payloadcertificateid 

<key>PayloadCertificateUUID</key>
<string>c59e77b0-3ea7-0137-75cd-6d6572616b69</string>

[GavinW]

Looks like someone else is having a similar problem - https://community.meraki.com/t5/Endpoint-Management-Systems/Custom-Apple-Profiles-data-payloads-are-...

It appears to be due to the <data> payloads, which would make sense why it breaks when adding a certificate.

[MattMorg · Accepted solution]

Hey @GavinW thank you for sharing this example with the community! We have updated the way Systems Manager sends custom .mobileconfig profiles which should have resolved this "Error = -50" problem you are seeing.

Can you try to install your custom .mobileconfig from Systems Manager again? 

[GavinW]

Working on both iOS and macOS. Thanks!

[Howiedoit]

Error details

Code: 1000

Domain: MCProfileErrorDomain

Error: The profile “Managed Settings” is invalid.

Error: Empty profile

Getting this when trying to send to a new iPhone 11 

I was wondering why Dashboard was saying device Managed, but NO Profile under iphone , and can't push one either.

Whats the fix?

[MattMorg]

@Howiedoit "Empty profile" error could happen if you're targeting iOS only payloads to a macOS device (or vice versa), or if the profile is genuinely empty. Can you contact Meraki support and open a case to investigate your device/profile specific configurations? Feel free to direct message me a case number afterwards if you need another look.