Afaria on iPhone - getting message 'Verification failed'

[Former Member]

Hi,

We have setup Afaria 6.6 environment. We have followed the installation manual and installed the iPhone server, While reaching from the iPhone device to server, We are getting the 'verification failed' error in iPhone.

We are able to subscribe the Windows mobile and Win32 systems and administer via http://<IP>.

We are able to reach the server through http://<IP>; through safari from iPhone device.

We appreciate your kind guidance on resolution

Regards,

MDM Team

[vobu]

If you're using self-signed/self-issued certificates, make sure that you have the root-level cert of your Certificate Authoritiy installed on your iOS device. Otherwise, the iOS device will decline the installation of the Afaria/Sybase client MDM cert during enrollment.

The "sign messages sent to iOS" is an optional Afaria component for signing the client MDM cert, subsequently signing all payload exchange between Afaria and iOS. It is a reasonable option to install, but not required.

hth, v.

[former_member10452]

Hi Sudharsan,

It could be because of below issues.

1. Your relay server (first point of contact from device) is not having proper certificate installed (it means cert not issues to FQDN).

2. If your device is contacting directly to Afaria server then your SSL cert is not issued to FQDN (fully qualified domain name).

3. During installation of enrollment server, you need to select cert of server to which your device will contact first. If you device contact through relay server then relay server cert should be selected during enrollment server installation.

To explain what FQDN cert means is that lets say your device contact to http://relayhost.domain.com:80/ then relay cert should be issued to relayhost.domain.com or if it's http://10.0.0.4:80/ then cert should be issued to 10.0.0.4. Same applies to Afaria server SSL port, if your device contacts directly.

Regards,

Abhishek Joshi

[asdasd_asdasd]

Check if installed Afaria 6.6 Feature Pack 1 on the server without this will not be possible to establish the connection, to see more description of the error can connect to a mac device and see the console with error messages in the XCODE

[Former Member]

Hi,

We have installed the Afaria 6.6 feature pack 1, still not able to establish the connection. Few points we are not able to understand from the documents. While installing the iOS provisioning server, I have unmarked 'Sign messages sent to iOS'. Which means it should not look for sso. But in iOS configuration, we are not able to proceed without providing the CA values. Present requirement is to connect with http which should not use SSO.

Confusing part is that windows mobiles able to connect and provision. SSO is optional or mandatory for iOS provisioning?

Kindly suggest me the steps to follow to provision the iPhone.

Regards

Sudharsan M

[Former Member]

Hi,

For Iphone provision :

1. Required CA server ( Enterprise , Subordinate , Standalone).

2. SSL certficate above IOS5 mandatory

3. Signing certificate is required for Enterprise CA server

4. All define ports should be open between relay server and Afaria server

5. Ports opening between CA server and Afaria server

5. All define ports should be open between relay and external ( Over the Air)