iOS - Corporate Pre-Enrolled Device enrollment fails with SCEP Installation error
We have the Apple Deployment portal set up to push devices into Intune. Intune is supposed to push a pre-enrollment configuration to the device.
Sometimes we get an error saying that the profile failed to install. SCEP server returned invalid response. The devices are activated with the carrier. The devices have also been connected to WiFi as an alternative.
As far as I know, the only way we can even get past that is by restoring the iOS device with iTunes. Obviously, you can see the predicament here that my company is facing.
Sameh Khairy commented
i am facing the same issue with one device only , does any one find solution for this ?
My org is experiencing this same error on a daily basis. We've had to stop our deployment as a result.
Initially putting the device in DFU mode and restoring via iTunes resolved it, but now it seems hit or miss. It has definitely gotten worse. I have a stack of devices that cannot be used.
Interestingly, I'm seeing errors for BYOD enrollment as well. Not the same issue, but the timing of it definite caught our attention.
What causes this error? I
1. I can't open either of those links on an iPhone. We do the pre-enrollment with affinity enabled. You cannot bypass that screen after the error has occurred.
2. 11/13/15 @ 10:30 AM
This is the error we first get when attempting to pull the configuration: http://i60.tinypic.com/mky6j5.jpg
Then we receive this message: "Configuration cannot be downloaded to your iPhone. Configuration not available"
I can't pull a screenshot because I do not have a Mac available and once the error occurs, you cannot bypass that whatsoever.
Damion Wiltshire, Intune Product Team commented
Can you give us a screenshot of the error you see on the iOS device?
Any update on this at all?
To Daniel Gerrity:
1. It looks like it is a small percentage, but significant enough that it causes time/money wasted on restoring the device. If I had to put a number to it. Out of 200 devices, around 30 of them have experienced the issue.
2. Some succeed and some fail. The problem is that users have the devices, so this is already put into production and wasn't seen during testing.
3. We disable some of the setup panes and push a passcode to the device. We used to try and push an email profile as well as an app to the device, but it was hit or miss during that 6 hour check-in window that it wasn't worth it to keep that up because we received user complaints that they never received the prompt or configuration.
Daniel Gerrity (Intune Product Team) commented
What percentage of devices are experiencing this failure?
Were failures clustered by time, or do some succeed while others fail at the same time?
Could you describe the Corporate Device Enrollment profile used for this devices?
I also recently started seeing the same error on several new iOS devices.
I'm experiencing the same problem with iOS device enrollment.