When I attempt to install the configuration profile without any identity certificate set, I get the error "Profile Failed to Install", and the Console shows the error "The identity certificate for 1 could not be found. No matter what certificate I add to the Credentials settings, it never becomes available for selection in the Identity field. To push a unique certificate not used for authentication, such as an internal root certificate authority (CA) certificate, or a specific policy: Credentials device policy Certificates Endpoint Management generates a self-signed Secure Sockets Layer (SSL) certificate during installation to secure the communication flows to the server.
#APPLE CONFIGURATION UTILITY ERROR CERTIFICATE NOT SIGNED HOW TO#
However, I can't figure out how to generate a valid certificate. I don't have a SCEP server, so I'm trying to use a certificate. These few lines you can use to generate the idendtity. Add the certificate to the device using the Credentials Settings, or use SCEP Settings to provide instructions for the device to obtain the certificate using SCEP. If you are using self-signed ssl then,While generating self-signed ssl certificate in server side,generate identity.p12 certificate and this certificate you need to use in identity section of IPCU. Select the certificate that the device uses to identify itself to the MDM server. Under the Mobile Device Management section, I can setup everything except for the "Identity" entry, which always just says "Add credentials in the Credentials payload."Īccording to the iPhone Configuration Utility documentation for the Identity field: Enrolling for certificates against the old Windows Server 2003 SCEP-Add On utility does not work with Apple devices so Windows Server 2008 or later is required.
![apple configuration utility error certificate not signed apple configuration utility error certificate not signed](https://nifi.apache.org/docs/nifi-docs/html/images/keychain-access-trust-certificate.png)
Using the iPhone Configuration Utility, I'm trying to create a configuration profile. If you have worked with MSCEP in the past, not much has changed other than some new registry keys to manage SCEP certificate enrollment. I'm trying to provision an iOS device to be managed using the Apple MDM capabilities.