Go Back   MacRumors Forums > Apple Systems and Services > OS X > Mac OS X Server, Xserve, and Networking

Reply
 
Thread Tools Search this Thread Display Modes
Old Aug 27, 2013, 03:36 PM   #1
BryanSchmiedele
macrumors member
 
Join Date: Apr 2010
Location: Overland Park, KS
"Trying to add a bogus certificate..." when sending out Profiles...

I am trying to insall a profile from Profile Manager 2 in Mac OS X Server to iPhones and am haging a terrible problem.

Let me outline the steps I am taking:

1. I enter my iPhone as a placeholder.
2. I create a new device group.
3. I add my iPhone placeholder to the group.
4. Send the Enrollement Profile to myself via email.
5. Install the Profile.

The group configuration is only to allow the device to be managed. Right now I am not even adding an app.

It looks like the profiles install, but I cannot add an app, and when I check the server logs I get this:

Aug 27 14:17:22 macserver.scoularmobile.com ProfileManager[49671] <Info>: CertUpdateHandler.run: replace/etc/certificates/Server Fallback SSL Certificate.61099C29AB0DBD78984CCCDE81DDE22C61DBB872.cert.pem0x00/etc/certificates/Device Management Identity Certificate.022C5A531765B92DC641255102513F71D982FCA9.cert.pem0x00
Aug 27 14:17:25 macserver.scoularmobile.com ProfileManager[49682] <Info>: CertUpdateHandler.run: replace/etc/certificates/Device Management Identity Certificate.0E3D10FD44E2752F0F5E0DB7F2CE5B2B6782580E.cert.pem0x00/etc/certificates/Device Management Identity Certificate.022C5A531765B92DC641255102513F71D982FCA9.cert.pem0x00
Aug 27 14:17:56 macserver.scoularmobile.com ProfileManager[49701] <Info>: CertUpdateHandler.run: replace/etc/certificates/Server Fallback SSL Certificate.61099C29AB0DBD78984CCCDE81DDE22C61DBB872.cert.pem0x00/etc/certificates/Device Management Identity Certificate.DB71C616FBA8EA95D6FE36E3014CEC544CD38B01.cert.pem0x00
Aug 27 14:17:59 macserver.scoularmobile.com ProfileManager[49711] <Info>: CertUpdateHandler.run: replace/etc/certificates/Device Management Identity Certificate.022C5A531765B92DC641255102513F71D982FCA9.cert.pem0x00/etc/certificates/Device Management Identity Certificate.DB71C616FBA8EA95D6FE36E3014CEC544CD38B01.cert.pem0x00
Aug 27 14:18:22 macserver.scoularmobile.com ruby[49605] <Info>: Pruning certificate chain to 18446744073709551615
Aug 27 14:18:22 macserver.scoularmobile.com ruby[49605] <Debug>: Trying to add a bogus certificate
Aug 27 14:18:22 macserver.scoularmobile.com ruby[49605] <Debug>: An error occured while inserting an untrusted certificate into the chain
Aug 27 14:18:22 macserver.scoularmobile.com ProfileManager[49605] <Info>: Pushed to <Device:"Bryan's iPhone"> with token 6BqFL5HRWYcCaBELhMoZUDt5I0iIyaunTH2PyMGEq8o=, {"mdm":"1463916F-C541-437F-B364-C9B44F61A73C","time":"1377631101.888488"}

What the heck is wrong? Please help, I am at my wit's end.

Bryan
BryanSchmiedele is offline   0 Reply With Quote
Old Aug 28, 2013, 03:00 AM   #2
alexrmc92
macrumors regular
 
Join Date: Feb 2013
Quote:
Originally Posted by BryanSchmiedele View Post
I am trying to insall a profile from Profile Manager 2 in Mac OS X Server to iPhones and am haging a terrible problem.

Let me outline the steps I am taking:

1. I enter my iPhone as a placeholder.
2. I create a new device group.
3. I add my iPhone placeholder to the group.
4. Send the Enrollement Profile to myself via email.
5. Install the Profile.

The group configuration is only to allow the device to be managed. Right now I am not even adding an app.

It looks like the profiles install, but I cannot add an app, and when I check the server logs I get this:

Aug 27 14:17:22 macserver.scoularmobile.com ProfileManager[49671] <Info>: CertUpdateHandler.run: replace/etc/certificates/Server Fallback SSL Certificate.61099C29AB0DBD78984CCCDE81DDE22C61DBB872.cert.pem0x00/etc/certificates/Device Management Identity Certificate.022C5A531765B92DC641255102513F71D982FCA9.cert.pem0x00
Aug 27 14:17:25 macserver.scoularmobile.com ProfileManager[49682] <Info>: CertUpdateHandler.run: replace/etc/certificates/Device Management Identity Certificate.0E3D10FD44E2752F0F5E0DB7F2CE5B2B6782580E.cert.pem0x00/etc/certificates/Device Management Identity Certificate.022C5A531765B92DC641255102513F71D982FCA9.cert.pem0x00
Aug 27 14:17:56 macserver.scoularmobile.com ProfileManager[49701] <Info>: CertUpdateHandler.run: replace/etc/certificates/Server Fallback SSL Certificate.61099C29AB0DBD78984CCCDE81DDE22C61DBB872.cert.pem0x00/etc/certificates/Device Management Identity Certificate.DB71C616FBA8EA95D6FE36E3014CEC544CD38B01.cert.pem0x00
Aug 27 14:17:59 macserver.scoularmobile.com ProfileManager[49711] <Info>: CertUpdateHandler.run: replace/etc/certificates/Device Management Identity Certificate.022C5A531765B92DC641255102513F71D982FCA9.cert.pem0x00/etc/certificates/Device Management Identity Certificate.DB71C616FBA8EA95D6FE36E3014CEC544CD38B01.cert.pem0x00
Aug 27 14:18:22 macserver.scoularmobile.com ruby[49605] <Info>: Pruning certificate chain to 18446744073709551615
Aug 27 14:18:22 macserver.scoularmobile.com ruby[49605] <Debug>: Trying to add a bogus certificate
Aug 27 14:18:22 macserver.scoularmobile.com ruby[49605] <Debug>: An error occured while inserting an untrusted certificate into the chain
Aug 27 14:18:22 macserver.scoularmobile.com ProfileManager[49605] <Info>: Pushed to <Device:"Bryan's iPhone"> with token 6BqFL5HRWYcCaBELhMoZUDt5I0iIyaunTH2PyMGEq8o=, {"mdm":"1463916F-C541-437F-B364-C9B44F61A73C","time":"1377631101.888488"}

What the heck is wrong? Please help, I am at my wit's end.

Bryan
do you have official certificated for "macserver.scoularmobile.com"? If so i suggest installing them and seeing if that fixes the issue.

The logs don't look bad, the error is on the debug log level which means it usually isn't a big deal.
alexrmc92 is offline   0 Reply With Quote
Old Sep 17, 2013, 09:15 PM   #3
mire3212
macrumors newbie
 
Join Date: May 2010
Location: Austin, TX
Quote:
Originally Posted by BryanSchmiedele View Post
Aug 27 14:17:22 macserver.scoularmobile.com ProfileManager[49671] <Info>: CertUpdateHandler.run: replace/etc/certificates/Server Fallback SSL Certificate.61099C29AB0DBD78984CCCDE81DDE22C61DBB872.cert.pem0x00/etc/certificates/Device Management Identity Certificate.022C5A531765B92DC641255102513F71D982FCA9.cert.pem0x00
This indicates it's mostly trying to use the wrong certificate. Make sure to set the certificate in the 'Certificates' section of the Server app to the Open Directory Root Certification Authority signed certificate (it will be signed by the Intermediate CA). Also make sure to check the box in Profile Manager under 'Sign Configuration Profiles' and make sure to specify the Code Signing certificate that is also signed by the Open Directory Certification Authority -- also signed from the Intermediate CA as before.
__________________
-Mire
mire3212 is offline   0 Reply With Quote

Reply
MacRumors Forums > Apple Systems and Services > OS X > Mac OS X Server, Xserve, and Networking

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Similar Threads
thread Thread Starter Forum Replies Last Post
Sending to Address Book "Group" using Mail.app? reubs OS X Mavericks (10.9) 3 Dec 17, 2013 02:52 PM
Can I add a "normal" 27" Monitor to my Thunderbolt Display? Azzin OS X Mavericks (10.9) 4 Jun 27, 2013 01:15 AM
URGENT: can I "add a line" and "buy full price" at APPLE store? Bossyman iPhone 0 Sep 21, 2012 09:26 AM
iPhone 'botically sending out "Notes" pages via Gmail to Undisclosed Recipients! brimcmike iPhone Tips, Help and Troubleshooting 5 Sep 15, 2012 11:52 PM
Setting up "profiles" in iPad (and others) PracticalMac iOS 5 and earlier 11 Jul 28, 2012 03:41 PM

Forum Jump

All times are GMT -5. The time now is 04:31 AM.

Mac Rumors | Mac | iPhone | iPhone Game Reviews | iPhone Apps

Mobile Version | Fixed | Fluid | Fluid HD
Copyright 2002-2013, MacRumors.com, LLC