Signing Certificates

[misdept]

Hi I need some help! I am trying to update our signing certificates because 2 seemed to have expired. The new certs were pushed out to the iPads and they are on them and show the updated ones in the certificate list in Meraki. But if you look at the Meraki management profile on the iPad they still show out of date. I have researched this a bit and it suggested reinstalling the MDM and for some that works but others I get an error that states "profile installation failed the new MDM payload does not match the old payload" which necessarily means that a profile is already on the device. My question is, is there a way to update them without me removing the current management profile because I would rather not have to redo over 200 iPads. 

Any input would be helpful!

[PhilipDAth · Accepted solution]

For Apple devices that are in Device Owner mode, if you let the certificate expire you have to wipe the device and re-enrol them into the MDM.

If they are in Supervised Mode, you'll have to remove the management profile and re-enrol.

This is a compulsory policy by Apple.

[misdept]

ugh that sucks. Thanks though!