Profile installation failed

Solved
nic_waller
Conversationalist

Profile installation failed

I have been successfully provisioning macOS laptops with Meraki Systems Manager for the last 6 months, and everything was working fine until today. I think last time I provisioned a laptop was a few weeks ago. Today when I tried to add a new laptop I encountered this message from macOS System Preferences (Profiles):

 

> Profile installation failed.

> Could not authenticate to the MDM server. The credentials within the enrollment profile may have expired.

 

I searched the Knowledge Base in the Meraki app but came up with nothing. Nor could I find a relevant answer on documentation.meraki.com.

 

- How can I confirm (or refute) that the credentials in the enrollment profile are indeed expired?

- Is it possible that changing settings in the SM Console could have caused this?

1 Accepted Solution
nic_waller
Conversationalist

It turned out the problem was specific to one particular laptop that had recently been repaired at the Apple Store.

 

The laptop had been joined to Meraki MDM prior to going in for repair. The main logic board was replaced at the Apple Store, and although the serial number stayed the same it must have changed some other hardware identifier. After coming back from repair, the laptop was reformatted but was unable to join Meraki MDM.

 

The solution was to Delete (Remove From Network) the laptop from the list of Devices in Meraki Systems Manager. After that, I had no trouble re-joining the laptop into Meraki MDM. This was a surprise, because normally it's not necessary to delete device entries, as they automatically merge based on serial number.

View solution in original post

4 Replies 4
BlakeRichardson
Kind of a big deal
Kind of a big deal

@nic_waller  is your Apple push certificate valid? 

Yes, the Apple push certificate is reported as valid in the admin interface. 

@nic_waller  How are you provisioning the laptops are you using DEP or Apple configurator?

nic_waller
Conversationalist

It turned out the problem was specific to one particular laptop that had recently been repaired at the Apple Store.

 

The laptop had been joined to Meraki MDM prior to going in for repair. The main logic board was replaced at the Apple Store, and although the serial number stayed the same it must have changed some other hardware identifier. After coming back from repair, the laptop was reformatted but was unable to join Meraki MDM.

 

The solution was to Delete (Remove From Network) the laptop from the list of Devices in Meraki Systems Manager. After that, I had no trouble re-joining the laptop into Meraki MDM. This was a surprise, because normally it's not necessary to delete device entries, as they automatically merge based on serial number.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels