cancel
Showing results for 
Search instead for 
Did you mean: 

iOS enrollment with Relay Server

former_member686053
Active Participant
0 Kudos

Hi,

I have Afaria Farm and 2 relay server. Topology like this:

It works with Android.

But I have to add iOS devices into my system. Tjats why,

I have Enterprise  Subordinate CA. And I install NDES role.

I create APNS cert and install my Master afaria

To SSL I install my Geotrust Signed  wildcard certificate:

into

Question 1: Do I have to do allsame steps to install APNS cert on my Slave afaria?

Question 2: What should I do to connect Relay and  Afaria wit RSOE ? and how?

Accepted Solutions (1)

Accepted Solutions (1)

former_member686053
Active Participant
0 Kudos

What is wrong about certificates?

former_member228655
Participant
0 Kudos

Hi Tevfik,

Can you please ensure the Certificate Authority page under Server -> Configuration -> Server has been configured for Enrollment server? Based on "A connection to the server could not be established", it seems CA server hasn't been configured for the enrollmen in Certificate Authority page.

Thanks,
Sejal

former_member686053
Active Participant
0 Kudos

Hi Sajel,

how do I do that?

former_member228655
Participant
0 Kudos

Does this mean you do not have configured Certificate Authority page? Can you please provide me a screen shot of this page - ADmin UI -> Server -> Configuration -> Server -> Certificate Authority.

If Certificate Autority page hasn't been configured then you will have to configure it by clicking on Add -> Provide Name(Name can be anything) ->Server address field need a CA server address and a port -> save the settings and then in Selection section, "For Enrollment Server:"  select the CA difinition that you just created. Please perform Connectivity test located at the bottom of this page to ensure CA server can be reachable.

Thanks,
Sejal

former_member686053
Active Participant
0 Kudos

Hi,

You can see my Cert. Auth. settingfs shown below. But when I fill those settings Now error change like :

Profile Instalaltion Failed

The Scep Server returned an invalid response

Additionally Altoug I configure relay server part, I dont configure any RSOE yet.

former_member228655
Participant
0 Kudos

Tevfik,

Please do not enable Relay server settings for your CA server. From Sp4 HF10+ onwards CA traffic need to be routed through Enrollment server, meaning Enrollment server proxy the CA traffic so it would be Relay server to Enrollment server's RSOE to Enrollment server to CA server.

keith_nunn
Active Participant
0 Kudos

Hi, Tevfik.

To help clarify the direction Sejal's heading, your error isn't the result of an SSL issue.  This is the error:

...Underlying error:

NSError:

Desc   : A connection to the server could not be established.

US Desc: A connection to the server could not be established.

Domain : MCHTTPTransactionErrorDomain

Code   : 23001

Type   : MCFatalError

Params : (

"https://ars.yasar.com.tr:443/ias_relay_server/client/rs_client.dll/es-afaria/aips2/aipService.svc/To...",

406

)

When your device is reaching out to provide it's MDM token, the Afaria Enrollment Server is returning an HTTP 406 (Not Acceptable) response code.  Generally, this is a purposeful return sent by the Enrollment Server when the communication isn't signed properly by the device.  Sejal's direction will help determine if the signing is proper.  Alternatively, you could check your server message log for IPH6034 and IPH6035 errors and, if you see them, search through SMP's xSearch for the error code.  There are many KBAs out there around those errors which have various root causes and additional symptoms.

Thanks,

Keith Nunn
SAP Active Global Support
SAP Canada

Answers (13)

Answers (13)

former_member686053
Active Participant
0 Kudos

Hi,

Fİnally we found what is wrong and then fixed by Using Keith perfect assistance.

Detail is in

http://scn.sap.com/thread/3487576

thnx for all.

See you another discussion

tracy_barkley
Employee
Employee
0 Kudos


Tevfik,

That is great to hear  Glad everything is working.  Have a good one!

former_member686053
Active Participant
0 Kudos

I thnk I fix IPH6034 by importing  root CA and Intermediate Root CA cert on relay servers.

But still get errors. I will digg error codes..

former_member686053
Active Participant
0 Kudos

Hi Keith and Sajel,

As Sajel said, I unchecked  relay server settings  on CA autority section,

But get same error.

And i dont know what is ISMP's xSearch really

keith_nunn
Active Participant
0 Kudos

Tevfik,

SMP = Service Market Place, which the SAP support portal, among other things.  xSearch is the cross-search utility for finding knowledge base articles, wiki content and other relevant items.  The URL is: http://service.sap.com/xsearch

The "IPH6034" and "IPH6035" error codes would be found in the Afaria Administrator.  Check the Server > Logs and filter the errors for "IPH60" and use the "Starts With" filter option.

Thanks,

Keith Nunn
SAP Active Global Support
SAP Canada

former_member686053
Active Participant
0 Kudos

OK, I unchecked relay server  settings.

But still get same error.  The SCEP server ...

former_member686053
Active Participant
0 Kudos

I think, it is about SSL,

I have IPCU device log:

Jan 23 10:01:17 ferudunatakan-iPadi Afaria[1928] <Warning>: [AipsController enrollmentCodeDidFinishWith:]

Jan 23 10:01:17 ferudunatakan-iPadi Afaria[1928] <Warning>: [AipsController enrollmentCodeDidParse:]

Jan 23 10:01:17 ferudunatakan-iPadi Afaria[1928] <Warning>: shortenrollmenturl_preference: https://goo.gl/vYPvEF

Jan 23 10:01:17 ferudunatakan-iPadi Afaria[1928] <Warning>: [AipsController doEnrollmentSeedDownload:TRUE]

Jan 23 10:01:17 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper init]

Jan 23 10:01:17 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper dealloc]

Jan 23 10:01:17 ferudunatakan-iPadi Afaria[1928] <Warning>: [EnrollmentCodeSeedDataDownloader.startDownload URL: https://goo.gl/vYPvEF #1]

Jan 23 10:01:17 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate netUser:0x80 busy:1]

Jan 23 10:01:17 ferudunatakan-iPadi Afaria[1928] <Warning>: connection:willSendRequest:redirectResponse:

Jan 23 10:01:17 ferudunatakan-iPadi Afaria[1928] <Warning>: httpRedirectResponse status: 0

Jan 23 10:01:17 ferudunatakan-iPadi Afaria[1928] <Warning>: httpRedirectResponse.URL: (null)

Jan 23 10:01:17 ferudunatakan-iPadi Afaria[1928] <Warning>: httpRequest.URL: https://goo.gl/vYPvEF

Jan 23 10:01:17 ferudunatakan-iPadi Afaria[1928] <Warning>: httpRequest.allHeaderField Dictionary: {

Accept = "*/*";

"Accept-Encoding" = "gzip, deflate";

"Accept-Language" = "en-us";

AfariaAuth = "";

AfariaCaps = "6.60.6620.2";

"User-Agent" = "Afaria iPhone Client";

}

Jan 23 10:01:18 ferudunatakan-iPadi CommCenter[43] <Notice>: com.apple.CommCenter.Prox - Declared system activity to prevent sleep

Jan 23 10:01:19 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate canAuthenticateAgainstProtectionSpace] NSURLAuthenticationMethodServerTrust

Jan 23 10:01:19 ferudunatakan-iPadi Afaria[1928] <Warning>: [EnrollmentCodeSeedDataDownloader connection:didReceiveAuthenticationChallenge] NSURLAuthenticationMethodServerTrust 0

Jan 23 10:01:19 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate connection:didReceiveAuthenticationChallenge] NSURLAuthenticationMethodServerTrust 0

Jan 23 10:01:19 ferudunatakan-iPadi Afaria[1928] <Warning>: [ServerTrustChallengeHandler _evaluateImportedCertificatesTrust] Dumping credentials...

Jan 23 10:01:19 ferudunatakan-iPadi Afaria[1928] <Warning>: _serverTrustResolvedWithSuccess, success = 1

Jan 23 10:01:19 ferudunatakan-iPadi Afaria[1928] <Warning>: resolve NSURLAuthenticationMethodServerTrust -> <NSURLCredential: 0x14e3fea0>: (null)

Jan 23 10:01:19 ferudunatakan-iPadi Afaria[1928] <Warning>: [ServerTrustChallengeHandler _evaluateImportedCertificatesTrust] Cert for host goo.gl trusted

Jan 23 10:01:19 ferudunatakan-iPadi Afaria[1928] <Warning>: connection:willSendRequest:redirectResponse:

Jan 23 10:01:19 ferudunatakan-iPadi Afaria[1928] <Warning>: httpRedirectResponse status: 301

Jan 23 10:01:19 ferudunatakan-iPadi Afaria[1928] <Warning>: httpRedirectResponse.URL: https://goo.gl/vYPvEF

Jan 23 10:01:19 ferudunatakan-iPadi Afaria[1928] <Warning>: httpRequest.URL: http://ars.yasar.com.tr:5007/ias_relay_server/client/rs_client.dll/es-afaria/aips/aipService.svc/Get...

Jan 23 10:01:19 ferudunatakan-iPadi Afaria[1928] <Warning>: httpRequest.allHeaderField Dictionary: {

Accept = "*/*";

"Accept-Encoding" = "gzip, deflate";

"Accept-Language" = "en-us";

AfariaAuth = "";

AfariaCaps = "6.60.6620.2";

"User-Agent" = "Afaria iPhone Client";

}

Jan 23 10:01:19 ferudunatakan-iPadi Afaria[1928] <Warning>: saving: longenrollmenturl_preference - http://ars.yasar.com.tr:5007/ias_relay_server/client/rs_client.dll/es-afaria/aips/aipService.svc/Get...

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: httpResponse.allHeaderField Dictionary: {

"Cache-Control" = private;

"Content-Length" = 1543;

"Content-Type" = "aips/plist+xml";

Date = "Fri, 23 Jan 2015 08:01:17 GMT";

Server = "Microsoft-IIS/7.5, Microsoft-IIS/7.5";

"X-AspNet-Version" = "4.0.30319";

"X-Powered-By" = "ASP.NET, ASP.NET";

}

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: connection:didReceiveResponse: http 200

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: httpResponse.didReceiveData Data <3c3f786d 6c207665 7273696f 6e3d2231 2e302220 656e636f 64696e67 3d227574 662d3822 3f3e0a3c 53656564 44617461 20506f6c 69637949 443d227b 35626634 62623866 2d353231 372d3437 61382d62 3033382d 30346233 33353639 38353161 7d223e0a 093c436f 6e666967 75726174 696f6e3e 0a09093c 53657276 65724164 64726573 733e6172 732e7961 7361722e 636f6d2e 74723c2f 53657276 65724164 64726573 733e0a09 093c5365 72766572 506f7274 3e353030 373c2f53 65727665 72506f72 743e0a09 093c5072 6f746f63 6f6c3e68 7474703c 2f50726f 746f636f 6c3e0a09 093c5669 72747561 6c446972 3e616970 733c2f56 69727475 616c4469 723e0a09 093c456e 726f6c6c 56697274 75616c44 69723e61 6970733c 2f456e72 6f6c6c56 69727475 616c4469 723e0a09 093c5265 6c617953 65727665 72506174 683e2f69 61735f72 656c6179 5f736572 7665722f 636c6965 6e742f72 735f636c 69656e74 2e646c6c 2f256369 64253c2f 52656c61 79536572 76657250 6174683e 0a09093c 4661726d 49443e65 732d6166 61726961 3c2f4661 726d4944 3e0a093c 2f436f6e 66696775 72617469 6f6e3e0a 093c5573 65725072 6f6d7074 3e3c2f55 73657250 726f6d70 743e0a09 3c536572 7665723e 0a09093c 47726f75 70417373 69676e3e 0a090909 3c47726f 75703e33 3c2f4772 6f75703e 0a09093c 2f47726f 75704173 7369676e 3e0a0909 3c4d444d 456e726f 6c6c202f 3e0a093c 2f536572 7665723e 0a093c41 66617269 61536565 64446174 613e0a09 093c7573 654e616d 696e674f 7074696f 6e733e31 3c2f7573 654e616d 696e674f 7074696f 6e733e0a 09093c63 6f6e6e65 63744166 74657249 6e737461 6c6c3e22 31223c2f 636f6e6e 65637441 66746572 496e7374 616c6c3e 0a09093c 6175746f 41707072 6f76653e 2231223c 2f617574 6f417070 726f7665 3e0a0909 3c557365 4964656e 74697479 43657274 69666963 6174653e 2231223c 2f557365 4964656e 74697479 43657274 69666963 6174653e 0a09093c 6d626454 7970653e 2235223c 2f6d6264 54797065 3e0a0909 3c6d6264 446e763e 22223c2f 6d626444 6e763e0a 09093c6d 62645072 65666978 3e22694f 53546573 745f223c 2f6d6264 50726566 69783e0a 09093c44 6f6d6169 6e3e2222 3c2f446f 6d61696e 3e0a0909 3c494f53 41636365 7373506f 6c696379 3e313330 3c2f494f 53416363 65737350 6f6c6963 793e0a09 093c656e 61626c65 436f6d70 726f6d69 7365643e 2230223c 2f656e61 626c6543 6f6d7072 6f6d6973 65643e0a 09093c53 53505469 746c653e 22223c2f 53535054 69746c65 3e0a0909 3c535350 44657363 72697074 696f6e3e 22223c2f 53535044 65736372 69707469 6f6e3e0a 09093c53 53505552 4c3e2222 3c2f5353 5055524c 3e0a0909 3c74656e 616e7449 443e2234 69357069 683a3022 3c2f7465 6e616e74 49443e0a 09093c72 656c6179 53657276 65725072 65666978 3e2f6961 735f7265 6c61795f 73657276 65722f636c69656e 742f7273 5f636c69 656e742e 646c6c3c 2f72656c 61795365 72766572 50726566 69783e0a 09093c72 656c6179 53657276 65724661 726d4944 3e594153 41522d49 533c2f72 656c6179 53657276 65724661 726d4944 3e0a0909 3c457874 72614461 7461313e 4b51556c 4e773377 72627252 5a77552f 2b474967 434e3851 434e413d 3c2f4578 74726144 61746131 3e0a0909 3c694f53 416e6472 6f696445 6e726f6c 6c6d656e 74557269 3e687474 703a2f2f 6172732e 79617361 722e636f 6d2e7472 3a353030 372f6961 735f7265 6c61795f 73657276 65722f63 6c69656e 742f7273 5f636c69 656e742e 646c6c2f 65732d61 66617269 612f6169 70732f61 69705365 72766963 652e7376 632f3c2f 694f5341 6e64726f 6964456e 726f6c6c 6d656e74 5572693e 0a09093c 4f4f4249 6e76656e 746f7279 53757070 6f72743e 313c2f4f 4f42496e 76656e74 6f727953 7570706f 72743e0a 093c2f41 66617269 61536565 64446174 613e0a09 3c43616c 6c626163 6b206167 656e743d 224b6579 52657175 65737441 67656e74 223e2f70 61636b61 67652f63 6572742f 67656e65 72617465 4b657932 3c2f4361 6c6c6261 636b3e0a 3c2f5365 65644461 74613e>

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate netUser:0x80 busy:0]

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: [AipsController enrollmentCodeSeedDidLoadWith:]

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: AipsController enrollmentCodeSeedDataDidLoadWith [1543] and http:200

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: [EnrollmentProfile parse]

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: Unexpected element name: "UseIdentityCertificate"

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: Unexpected element name: "iOSAndroidEnrollmentUri"

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: Unexpected element name: "OOBInventorySupport"

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: >>> EnrollmentProfile <<<

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: PolicyID: {5bf4bb8f-5217-47a8-b038-04b33569851a}

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: >>> EnrollmentConfigurationParameters <<<

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: ServerAddress: ars.yasar.com.tr

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: ServerPort: 5007

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: ServerProtocol: http

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: ServerVirtualDirectory: aips

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: EnrollmentVirtualDirectory: aips

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: RelayServerPath: /ias_relay_server/client/rs_client.dll/%cid%

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: RelayServerFarmID: es-afaria

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: homeSeedingParmameters: s=ars.yasar.com.tr;p=5007;h=http;v=aips;e=aips;c=es-afaria;r=/ias_relay_server/client/rs_client.dll/%cid%

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: UserPrompts:[0]

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: Groups:[1]

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: >>> EnrollmentGroup <<<

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: Name: 3

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: MDMEnroll: present and empty

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: >>> EnrollmentAfariaSeed <<<

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: NamingOption: 1

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: ConnectAfterInstall: 1

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: AutoApprove: 1

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: MbdType: 5

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: MbdDnv:

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: MbdPrefix: iOSTest_

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: MbdPromptVar: (null)

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: Domain:

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: IOSAccessPolicy: 130

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: TenantID: 4i5pih:0

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: RelayServerPrefix: /ias_relay_server/client/rs_client.dll

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: RelayServerFarmID: YASAR-IS

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: ServerIP: (null)

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: SSPTitle:

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: SSPDescription:

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: SSPURL:

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: EnableCompromised: 0

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: [AipsController parseSeedDataDidSucceed]

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: [doDelayedEnrollment]

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate netUser:0x80 busy:0]

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper init]

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper dealloc]

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: UIDevice.getUDID > b36808e63660495c3c93c6fd55ac4f22e21bc666

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper init]

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper dealloc]

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper init]

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper dealloc]

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: [AipsController enrollmentUserPromptsDidFinishWith:]

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: EnrollmentRecordRequiredDataPut > http://ars.yasar.com.tr:5007/ias_relay_server/client/rs_client.dll/es-afaria/aips/aipService.svc/Enr...{5bf4bb8f-5217-47a8-b038-04b33569851a}&ClientType=-8

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: EnrollmentRecordRequiredDataPut >> http://ars.yasar.com.tr:5007/ias_relay_server/client/rs_client.dll/es-afaria/aips/aipService.svc/Enr...

Jan 23 10:01:20 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate netUser:0x80 busy:1]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: httpResponse.allHeaderField Dictionary: {

"Cache-Control" = private;

"Content-Length" = 511;

"Content-Type" = "aips/plist+xml";

Date = "Fri, 23 Jan 2015 08:01:18 GMT";

Server = "Microsoft-IIS/7.5, Microsoft-IIS/7.5";

"X-AspNet-Version" = "4.0.30319";

"X-Powered-By" = "ASP.NET, ASP.NET";

}

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: connection:didReceiveResponse: http 200

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate netUser:0x80 busy:0]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: AipsController enrollmentRecordRequiredDataPutEndedWith [511] and http:200

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: enrollmentFinishedWithSuccess

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [HomeViewController viewWillAppear]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [HomeViewController willRotateToInterfaceOrientation:3 duration:]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [HomeViewController didRotateFromInterfaceOrientation:3]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: before redirect: http://ars.yasar.com.tr:5007/ias_relay_server/client/rs_client.dll/es-afaria/aips2/aipService.svc/St...

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: after redirect: http://ars.yasar.com.tr:5007/ias_relay_server/client/rs_client.dll/es-afaria/aips2/aipService.svc/St...

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: UseIdentityCert value: 1

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AipsController enrollmentRecordRequiredDataPutEndedWith:] AppHasRunPreviously set

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AipsController doConnect:]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate.isClientDisabled 0]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate.isClientDisabled 0]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AipsController.doConnect - resetenrollment_preference NO]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AipsController cancelPost]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: Posting inventory

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AipsController setStatusLine:"Verifying device status..."]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate netUser:0x1 busy:0]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate netUser:0x1 busy:1]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper init]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper dealloc]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: UIDevice.getUDID > b36808e63660495c3c93c6fd55ac4f22e21bc666

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper init]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper dealloc]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: postToURL:"http://ars.yasar.com.tr:5007/ias_relay_server/client/rs_client.dll/es-afaria/aips/aipService.svc/Cli..."

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [UserIdentityCert.prepareToUseCertAuthentication] user identity cert. invalid CN: (null).

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper init]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper dealloc]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: UIDevice.getUDID > b36808e63660495c3c93c6fd55ac4f22e21bc666

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper init]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper dealloc]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: startPost

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate netUser:0x80 busy:0]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: processPendingConnect: main thread - calling loadAppList

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper init]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [KeychainWrapper dealloc]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: UIDevice.getUDID > b36808e63660495c3c93c6fd55ac4f22e21bc666

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: AppListViewControllerProtocol protocol -> appListLoadStarted

Jan 23 10:01:21 ferudunatakan-iPadiAfaria[1928] <Warning>: loadAppListForServer:"https://rs2.yasar.com.tr:5007/ias_relay_server/client/rs_client.dll/ps-afaria1/ps/ps.svc" "https://rs2.yasar.com.tr:5007/ias_relay_server/client/rs_client.dll/ps-afaria1/ps2/ps.svc" client:b36808e63660495c3c93c6fd55ac4f22e21bc666

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: - url = "https://rs2.yasar.com.tr:5007/ias_relay_server/client/rs_client.dll/ps-afaria1/ps/ps.svc/packages/b3..."

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [UserIdentityCert.prepareToUseCertAuthentication] user identity cert. invalid CN: (null).

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate netUser:0x2 busy:1]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: connection:didFailWithError:

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate netUser:0x2 busy:0]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: Connection failed: Error - A server with the specified hostname could not be found. https://rs2.yasar.com.tr:5007/ias_relay_server/client/rs_client.dll/ps-afaria1/ps/ps.svc/packages/b3...

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: AppListViewControllerProtocol protocol -> appListDidFailToLoad

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: doSearch

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate issueAppListDidFailToLoadAlert]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [DataSender connection:didReceiveResponse:]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: httpResponse.allHeaderField Dictionary: {

"Cache-Control" = private;

"Content-Length" = 362;

"Content-Type" = "text/xml";

Date = "Fri, 23 Jan 2015 08:01:18 GMT";

Server = "Microsoft-IIS/7.5, Microsoft-IIS/7.5";

"X-AspNet-Version" = "4.0.30319";

"X-Powered-By" = "ASP.NET, ASP.NET";

}

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: connection:didReceiveResponse: http 200

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [DataSender connection:didReceiveData:]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [DataSender connectionDidFinishLoading:]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: HTTP code: 200, Received 362 bytes of data

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AipsController updateLastConnection]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AipsController setStatusLine:"Verification complete"]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate netUser:0x1 busy:0]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [DataSender processResponse]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: UIDevice.getUDID > b36808e63660495c3c93c6fd55ac4f22e21bc666

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: NitroDesk URL = http://ars.yasar.com.tr:5007/ias_relay_server/client/rs_client.dll/es-afaria/aips/aipService.svc/Get...

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate netUser:0x1000 busy:1]

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: parser:didStartElement:root

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: parser:didStartElement:ClientSeedInfo

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: parser:didStartElement:PackageServerAddress

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: parser:didEndElement:PackageServerAddress

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: parser:didStartElement:PackageServerVirtDir

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: parser:didEndElement:PackageServerVirtDir

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: parser:didStartElement:PackageServerAuthVirtDir

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: parser:didEndElement:PackageServerAuthVirtDir

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: parser:didStartElement:DeviceUDID

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: parser:didEndElement:DeviceUDID

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: parser:didEndElement:ClientSeedInfo

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: parser:didStartElement:TEMSettings

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: parser:didEndElement:TEMSettings

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: parser:didEndElement:root

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: didParsePackageServerAddress:"https://rs2.yasar.com.tr:5007/ias_relay_server/client/rs_client.dll/ps-afaria1" virtDir:"ps" authVirtDir:"ps2" UDID:"b36808e63660495c3c93c6fd55ac4f22e21bc666" WiFiMAC:"(null)"

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: UIDevice.setUDID > b36808e63660495c3c93c6fd55ac4f22e21bc666 match - redundant ok.

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: handlePackageServerInfo:

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: handlePackageServerInfo: address="https://rs2.yasar.com.tr:5007/ias_relay_server/client/rs_client.dll/ps-afaria1" virtDir="ps" authVirtDir="ps2"

Jan 23 10:01:21 ferudunatakan-iPadi Afaria[1928] <Warning>: seedPS: ConnectionParams server="rs2.yasar.com.tr" port="5007" protocol="https" farmID="ps-afaria1" urlPrefix="/ias_relay_server/client/rs_client.dll/%cid%" virtualDirectory="ps"  authVirtualDirectory="ps2"

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: NitroDesk didRecieveData

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: NitroDeskDownloader.connectionDidFinishLoading start.

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate netUser:0x1000 busy:0]

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: nitro desk xml <NitroDesk>

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: NitroDeskXML didStartDocument

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: NitroDeskXML didStartElement: NitroDesk

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: NitroDesk XMLParser error: The operation couldnt be completed. (NSXMLParserErrorDomain error 5.)

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: Failed to parser NitroDeskXML

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: [AipsController NitroDeskDidFailToLoad]

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: [AipsController doMdmRedirect]

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: [AipsController presentModalViewController:animated:]

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: AcquireUserIdentityCertificate set to obtain user identity cert.

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: [UserIdentityCert.createUser] input invalid

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: [AipsController dismissModalViewControllerAnimated:]

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: [HomeViewController viewWillAppear]

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: [HomeViewController willRotateToInterfaceOrientation:3 duration:]

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: [HomeViewController didRotateFromInterfaceOrientation:3]

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: attempting redirect: http://ars.yasar.com.tr:5007/ias_relay_server/client/rs_client.dll/es-afaria/aips2/aipService.svc/St...

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: UIDevice.getUDID > b36808e63660495c3c93c6fd55ac4f22e21bc666

Jan 23 10:01:22 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate issueAppListDidFailToLoadAlert2]

Jan 23 10:01:23 ferudunatakan-iPadi profiled[1929] <Notice>: (Note ) profiled: Service starting...

Jan 23 10:01:23 ferudunatakan-iPadi profiled[1929] <Notice>: (Note ) MC: Profile Sybase - iAnywhere queued for installation.

Jan 23 10:01:23 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate applicationWillResignActive:]

Jan 23 10:01:23 ferudunatakan-iPadi Afaria[1928] <Warning>: [AfariaAppDelegate applicationDidEnterBackground:]

Jan 23 10:01:23 ferudunatakan-iPadi Afaria[1928] <Warning>: AppListViewControllerProtocol protocol -> resetImageDownloads

Jan 23 10:01:23 ferudunatakan-iPadi backboardd[29] <Warning>: CoreAnimation: updates deferred for too long

Jan 23 10:01:23 ferudunatakan-iPadi backboardd[29] <Warning>: CoreAnimation: timed out fence 2ff03

Jan 23 10:01:27 ferudunatakan-iPadi profiled[1929] <Notice>: (Note ) MC: Checking for MDM installation...

Jan 23 10:01:27 ferudunatakan-iPadi profiled[1929] <Notice>: (Note ) MC: ...finished checking for MDM installation.

Jan 23 10:01:29 ferudunatakan-iPadi profiled[1929] <Notice>: (Note ) MC: Enrolling in OTA Profile service...

Jan 23 10:01:34 ferudunatakan-iPadi profiled[1929] <Notice>: (Note ) MC: Attempting to retrieve issued certificate...

Jan 23 10:01:49 ferudunatakan-iPadi lockdownd[51] <Notice>: 002c1000 _select_socket: receive secure message timeout!

Jan 23 10:01:49 ferudunatakan-iPadi profiled[1929] <Notice>: (Note ) MC: Issued certificate received.

Jan 23 10:01:49 ferudunatakan-iPadi profiled[1929] <Notice>: (Note ) MC: Retrieving profile from OTA Profile service...

Jan 23 10:01:50 ferudunatakan-iPadi profiled[1929] <Notice>: (Note ) MC: Received final profile: Sybase - iAnywhere

Jan 23 10:01:50 ferudunatakan-iPadi profiled[1929] <Notice>: (Note ) MC: Beginning profile installation...

Jan 23 10:01:56 ferudunatakan-iPadi profiled[1929] <Error>: MKBDeviceLockAssertion: Status missing from response

Jan 23 10:01:56 ferudunatakan-iPadi profiled[1929] <Error>: __MKBAssertionFinalize: __MKBAssertionFinalize(0x176bff90)

Jan 23 10:01:56 ferudunatakan-iPadi profiled[1929] <Error>: MKBDeviceLockAssertion: MKBDeviceLockAssertion  (asserttype:1147656 with error 22)

Jan 23 10:01:56 ferudunatakan-iPadi profiled[1929] <Notice>: (Error) MC: Could not hold keybag lock assertion. Error: The operation couldnt be completed. Invalid argument

Jan 23 10:01:59 ferudunatakan-iPadi securityd[84] <Error>:  SecDbItemInsertOrReplace INSERT failed: The operation couldnt be completed. (com.apple.utilities.sqlite3 error 19 - reset: [19] columns ctyp, issr, slnr, agrp, sync are not unique sql: INSERT INTO cert(rowid,cdat,mdat,ctyp,cenc,labl,alis,subj,issr,slnr,skid,pkhh,data,agrp,pdmn,sync,tomb,sha1)VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?))

Jan 23 10:01:59 ferudunatakan-iPadi securityd[84] <Error>:  securityd_xpc_dictionary_handler profiled[1929] add The operation couldnt be completed. (OSStatus error -25299 - duplicate item O,cert,9751B3C5,L,dku,com.apple.certificates,0,ctyp,cenc,labl,subj,issr,slnr,pkhh,v_Data,20150123080159.820954Z,FF458306)

Jan 23 10:01:59 ferudunatakan-iPadi profiled[1929] <Error>:  SecOSStatusWith error:[-25299] The operation couldnt be completed. (OSStatus error -25299 - Remote error : The operation couldnt be completed. (OSStatus error -25299 - duplicate item O,cert,9751B3C5,L,dku,com.apple.certificates,0,ctyp,cenc,labl,subj,issr,slnr,pkhh,v_Data,20150123080159.820954Z,FF458306))

Jan 23 10:02:00 ferudunatakan-iPadi profiled[1929] <Notice>: (Note ) MC: Attempting to retrieve issued certificate...

Jan 23 10:02:00 ferudunatakan-iPadi profiled[1929] <Notice>: (Note ) MC: Issued certificate received.

Jan 23 10:02:10 ferudunatakan-iPadi profiled[1929] <Notice>: (Error) MDM: Cannot Authenticate. Error: NSError:

Desc   : A connection to the server could not be established.

US Desc: A connection to the server could not be established.

Domain : MCHTTPTransactionErrorDomain

Code   : 23001

Type   : MCFatalError

Params : (

"https://ars.yasar.com.tr:443/ias_relay_server/client/rs_client.dll/es-afaria/aips2/aipService.svc/To...",

406

)

Jan 23 10:02:10 ferudunatakan-iPadi profiled[1929] <Notice>: (Error) MC: Cannot install MDM mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666. Error: NSError:

Desc   : The payload mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666 could not be installed.

Sugg   : A connection to the server could not be established.

US Desc: The payload mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666 could not be installed.

US Sugg: A connection to the server could not be established.

Domain : MCInstallationErrorDomain

Code   : 4001

Type   : MCFatalError

Params : (

"mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666"

)

...Underlying error:

NSError:

Desc   : A connection to the server could not be established.

US Desc: A connection to the server could not be established.

Domain : MCHTTPTransactionErrorDomain

Code   : 23001

Type   : MCFatalError

Params : (

"https://ars.yasar.com.tr:443/ias_relay_server/client/rs_client.dll/es-afaria/aips2/aipService.svc/To...",

406

)

Jan 23 10:02:10 ferudunatakan-iPadi profiled[1929] <Notice>: (Error) MC: Rolling back installation of profile Sybase - iAnywhere...

Jan 23 10:02:10 ferudunatakan-iPadi profiled[1929] <Notice>: (Error) MC: Installation of profile Sybase - iAnywhere failed with error: NSError:

Desc   : The profile Config Payload could not be installed.

Sugg   : The payload mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666 could not be installed.

US Desc: The profile Config Payload could not be installed.

US Sugg: The payload mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666 could not be installed.

Domain : MCProfileErrorDomain

Code   : 1009

Type   : MCFatalError

Params : (

"Config Payload"

)

...Underlying error:

NSError:

Desc   : The payload mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666 could not be installed.

Sugg   : A connection to the server could not be established.

US Desc: The payload mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666 could not be installed.

US Sugg: A connection to the server could not be established.

Domain : MCInstallationErrorDomain

Code   : 4001

Type   : MCFatalError

Params : (

"mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666"

)

...Underlying error:

NSError:

Desc   : A connection to the server could not be established.

US Desc: A connection to the server could not be established.

Domain : MCHTTPTransactionErrorDomain

Code   : 23001

Type   : MCFatalError

Params : (

"https://ars.yasar.com.tr:443/ias_relay_server/client/rs_client.dll/es-afaria/aips2/aipService.svc/To...",

406

)

Jan 23 10:02:10 ferudunatakan-iPadi profiled[1929] <Notice>: (Error) MC: Profile Sybase - iAnywhere failed to install with error: NSError:

Desc   : Profile Failed to Install

Sugg   : The profile Config Payload could not be installed.

US Desc: Profile Failed to Install

US Sugg: The profile Config Payload could not be installed.

Domain : MCInstallationErrorDomain

Code   : 4001

Type   : MCFatalError

...Underlying error:

NSError:

Desc   : The profile Config Payload could not be installed.

Sugg   : The payload mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666 could not be installed.

US Desc: The profile Config Payload could not be installed.

US Sugg: The payload mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666 could not be installed.

Domain : MCProfileErrorDomain

Code   : 1009

Type   : MCFatalError

Params : (

"Config Payload"

)

...Underlying error:

NSError:

Desc   : The payload mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666 could not be installed.

Sugg   : A connection to the server could not be established.

US Desc: The payload mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666 could not be installed.

US Sugg: A connection to the server could not be established.

Domain : MCInstallationErrorDomain

Code   : 4001

Type   : MCFatalError

Params : (

"mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666"

)

...Underlying error:

NSError:

Desc   : A connection to the server could not be established.

US Desc: A connection to the server could not be established.

Domain : MCHTTPTransactionErrorDomain

Code   : 23001

Type   : MCFatalError

Params : (

"https://ars.yasar.com.tr:443/ias_relay_server/client/rs_client.dll/es-afaria/aips2/aipService.svc/To...",

406

)

Jan 23 10:02:10 ferudunatakan-iPadi profiled[1929] <Notice>: (Note ) MC: Removing certificate with persistent ID 69646e740000000000000074

Jan 23 10:02:10 ferudunatakan-iPadi profiled[1929] <Notice>: (Note ) MC: Removing certificate with persistent ID 69646e740000000000000075

Jan 23 10:02:10 ferudunatakan-iPadi profiled[1929] <Notice>: (Note ) MC: Removing certificate with persistent ID 69646e740000000000000072

Jan 23 10:02:10 ferudunatakan-iPadi profiled[1929] <Notice>: (Note ) MC: Removing certificate with persistent ID 69646e740000000000000073

Jan 23 10:02:10 ferudunatakan-iPadi profiled[1929] <Notice>: (Note ) MC: Removing certificate with persistent ID 636572740000000000000071

Jan 23 10:02:10 ferudunatakan-iPadi profiled[1929] <Notice>: (Error) MC: Installation failed. Error: NSError:

Desc   : Profile Installation Failed

Sugg   : Profile Failed to Install

US Desc: Profile Installation Failed

US Sugg: Profile Failed to Install

Domain : MCInstallationErrorDomain

Code   : 4001

Type   : MCFatalError

...Underlying error:

NSError:

Desc   : Profile Failed to Install

Sugg   : The profile Config Payload could not be installed.

US Desc: Profile Failed to Install

US Sugg: The profile Config Payload could not be installed.

Domain : MCInstallationErrorDomain

Code   : 4001

Type   : MCFatalError

...Underlying error:

NSError:

Desc   : The profile Config Payload could not be installed.

Sugg   : The payload mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666 could not be installed.

US Desc: The profile Config Payload could not be installed.

US Sugg: The payload mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666 could not be installed.

Domain : MCProfileErrorDomain

Code   : 1009

Type   : MCFatalError

Params : (

"Config Payload"

)

...Underlying error:

NSError:

Desc   : The payload mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666 could not be installed.

Sugg   : A connection to the server could not be established.

US Desc: The payload mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666 could not be installed.

US Sugg: A connection to the server could not be established.

Domain : MCInstallationErrorDomain

Code   : 4001

Type   : MCFatalError

Params : (

"mdm-b36808e63660495c3c93c6fd55ac4f22e21bc666"

)

...Underlying error:

NSError:

Desc   : A connection to the server could not be established.

US Desc: A connection to the server could not be established.

Domain : MCHTTPTransactionErrorDomain

Code   : 23001

Type   : MCFatalError

Params : (

"https://ars.yasar.com.tr:443/ias_relay_server/client/rs_client.dll/es-afaria/aips2/aipService.svc/To...",

406

)

Jan 23 10:02:10 ferudunatakan-iPadi Preferences[1879] <Warning>: -[VPNBundleController _vpnConfigurationChanged:] (0x16e52810:<VPNBundleController: 0x16e52810>): _serviceCount(2), serviceCount(2), toggleInRootMenu(0), RootMenuItem(1)

former_member686053
Active Participant
0 Kudos

OOops,

If we talk about Relays alsoi yes I found WebDAV and uninstall.

Good news, I pass that error.

Bad news, I got error in profile instllation step:

"Profile Installation Failed  Ivalid Profile"

former_member686053
Active Participant
0 Kudos

I check it WebDAV not installed.

Do I have to create RSOE cof CA?

or do I have to use https instead of http?

former_member686053
Active Participant
0 Kudos

Tomorrow i will get log from device by IPCU

tracy_barkley
Employee
Employee
0 Kudos

If it was HTTPS as an issue, you would have a profile installation failed.  Your CA should be relayed in SP5.  I believe this is prior to getting the CA portion of the enrollment, I will wait for the device logs then, but if you can add in the IIS logs from both the enrollment server and the relay, that would greatly assist. 

keith_nunn
Active Participant
0 Kudos

Tevfik,

You probably did, but considering how many incidents we've seen with a 405 as a result of WebDAV, I have to ask to be sure.  Did you verify that the WebDAV Publishing role service was not installed on any Relay Server or Enrollment Server machine?  Based on your diagram, that would be four machines that need to be verified.

The other causes for a 405 generally require a very specific removal of method support for POST/PUT requests in the Request Filtering module of IIS.  The IIS log would confirm which machine is actually returning the 405.

Thanks,

Keith Nunn
SAP Active Global Support
SAP Canada

former_member686053
Active Participant
0 Kudos

I check from interneton ios device:

http://ars.yasar.com.tr:5007/ias_relay_server/client/rs_client.dll

and i get  Overall availability: Full

Then I write down my enrollment code: gvYPvEF

and its Inspection is:

http://ars.yasar.com.tr:5007/ias_relay_server/client/rs_client.dll/es-afaria/aips/aipService.svc/Get...

When I try to enroll device, I get:

"Enrollment is incomplete.Refresh page to try again"

P.S.  I test this Brand new iPAD, no cert or profile installed  before.

tracy_barkley
Employee
Employee
0 Kudos

Tevfik,

We hit your relay and it is giving us a 405 method not supported.  Can you check out http://service.sap.com/sap/support/notes/1861821 and make sure that WebDAV is not installed.


former_member686053
Active Participant
0 Kudos

After Install APNS cert. What is next?

How to configure RSOE for iOS devices to enrll, package server etc?

tracy_barkley
Employee
Employee
0 Kudos

Tevfik,

If your original enrollment RSOE on the master is this,

-id    es-afaria1   

-f    es-afaria   

-cs    "host=10.40.1.212;port=80;"   

-cr    "host=172.31.255.88;port=5007;url_suffix=/ias_relay_server/server/rs_server.dll"    

-q

-o c:\Temp\rsoe-enroll.log

then your  RSOE on the slave would be this

-id    es-afaria2   

-f    es-afaria   

-cs    "host=10.96.1.212;port=80;"   

-cr    "host=172.31.255.88;port=5007;url_suffix=/ias_relay_server/server/rs_server.dll"    

-q

-o c:\Temp\rsoe-enroll.log

Everything stays the same except the back end server and the id.

Does this help?

Tracy

former_member686053
Active Participant
0 Kudos

Hi Tracy,

I think there is misunderstood.

Let me explain what need detailed:

1. 6 Outbound Enablers (3 for Master,3  for Slave afaria)

    1.1 Afaria


-id    es-afaria1   

-f    es-afaria   

-cs    "host=10.40.1.212;port=80;"   

-cr    "host=REAL_IP.88;port=5007;url_suffix=/ias_relay_server/server/rs_server.dll"    

-q

-o c:\Temp\rsoe-enroll.log

    1.2 Enrollment

-id    es-afaria1   

-f    es-afaria   

-cs    "host=10.40.1.212;port=80;"   

-cr    "host=REAL_IP;port=5007;url_suffix=/ias_relay_server/server/rs_server.dll"    

-q

-o c:\Temp\rsoe-enroll.log

   1.3 Package server

-id    ps-afaria1   

-f    ps-afaria   

-cs    "host=10.40.1.212;port=80;"   

-cr    "host=REAL_IP;port=5007;url_suffix=/ias_relay_server/server/rs_server.dll"    

-q

-o c:\Temp\rsoe-ps1.log

This topology works well for Android.

I need to Add iOS devices into my afaria Environment

Thats why,  I set those things:

2. Enterprise subordinate CA (It is also  used for my Active Directory)

Sanitized CA short name (DS name): YasarCA1

CA type: 1 -- Enterprise Subordinate CA

    ENUM_ENTERPRISE_SUBCA -- 1

I ınstall NDES  role and following fine tunes about CA.

3. AppleComputerRootCertificate.cer

4. AppleAAICA.cer

5. APNS Certificate ( Created acording to directives)

6. GeoTrust Signed trusted wildcard certificate

I install all 4 certificates to my afaria servers

I Install 3 certificates to my Relay server except APNS Certificate.

7.Settings On Admin UI

    7.1 Afaria Admin UI/Communication/Device Communication/Protocol And Ports/ HTTP: 81

    7.2 Afaria Admin UI/Communication/Device Communication/Address for device communication: http://REAL_IP:5007

    7.3 Certificate Authority:

   7.4 Afaria Admin UI/Component/Enrollment Server/Enrollment Server/Use Relay Server : Checked (es-afaria)

    7.5 Afaria Admin UI/Component/Enrollment Server/Enrollment Server/Unauthorized virtual directory : aips

    7.6 Afaria Admin UI/Component/Enrollment Server/Enrollment Server/Authorized virtual directory : aips2

   7.7 Afaria Admin UI/Component/Enrollment Server/Enrollment Server/Signing certificate name: EMPTY

    7.8 Afaria Admin UI/Component/iOS Notification/APNS Push Certificate (for Mobile Device Management)/Name : APSP:e3508593-b37c-XXYYZZ

   7.9 Afaria Admin UI/Component/iOS Notification/APNS Push Certificate (for Mobile Device Management)/Push Service: com.apple.mgmt.External.e3508593-b37c-XXYYZZ

NOW. Question is What I have to do next? and how? Because there not well explanation on Guides

tracy_barkley
Employee
Employee
0 Kudos

Tevfik,

Nothing else really.  The iOS device uses the exact same enrollment RSOE as iOS.  All devices actually do.  As long as it is communicating you should be fine if you have everything set up.  Now you make an enrollment policy and place it in the SSP (or whatever method you are using)  If you get an error, we may need to troubleshoot that.

Tracy

former_member686053
Active Participant
0 Kudos

I know this article very well. Because I use it to deploy my afaria

former_member686053
Active Participant
0 Kudos

Hi,

if we assume that We use 443 and my original menrollment RSOE is like this:

------------------------------------------------

-id    es-afaria1   

-f    es-afaria   

-cs    "host=10.40.1.212;port=80;"   

-cr    "host=172.31.255.88;port=5007;url_suffix=/ias_relay_server/server/rs_server.dll"    

-q

-o c:\Temp\rsoe-enroll.log

----------------------------------------------

So, iOS enrollment will be like this :

-id    es-afaria1-ios 

-f    es-afaria-ios  

-cs    "host=10.40.1.212;port=80;"   

-cr    "host=172.31.255.88;port=443;url_suffix=/ias_relay_server/server/rs_server.dll"    

-q

-o c:\Temp\rsoe-enroll.log

right?

And ,if we Assumed that we use port 443 for https, I have to bind port 443  on Relay Server IIS . IIS asks me certificate. But which cert? Can I use the cert shown above? I mean *.yasar.com.te Geotrust signed cert? Or another cert?

former_member228655
Participant
0 Kudos

Hi Tevfik,

1. Yes, you will need to install APNS certificate on the Slave server as per diagram, enrollment server is also installed on a slave server. Apple certificates need to be installed on every enrollment server in Afaria Farm landscape.

2. Check below SAP KBA:

https://i7p.wdf.sap.corp/sap/support/notes/1939665

Hope this helps!

Thank you,
Sejal Patel

former_member228655
Participant
0 Kudos

Just realized that I posted an internal link. Here is the external link to that KBA:

http://service.sap.com/sap/support/notes/1939665

Thanks,
Sejal

former_member686053
Active Participant
0 Kudos

Understand. But where is farm and server definition  on Afarai Admin UI about iOS ? I should use this parameters in RSOE.

tracy_barkley
Employee
Employee
0 Kudos

There really isn't a farm or server definition for iOS as it is handled by an IIS web service.  If you have the enrollment server defined on both machines the only difference will be the local address.  The port you use is the one defined in IIS for the website.  Normally 80 or 443 by default


tracy_barkley
Employee
Employee
0 Kudos

Tevfik,

1) Based on our other conversation, you have this one figured out.

2)I answered on your other thread but more or less you duplicate your RSOE on the slave, and the only difference between the two is the back end server address.

Tracy Barkley

SAP Active Global Support