The profile Meraki Systems Manager could not be installed due to an unexpected error

11th April 2013, 11:16 AM #1

Hi All,

I'm having trouble with Meraki Systems Manager. I have set up the account, setup the apple push certificate and can enroll the device. It is constantly checking in with the meraki servers and correctly identifies everything about my device. I have set the profile to add wifi settings and the enforce restrictions such as using facetime and have set an app to deploy. When I enroll the device the app atempts to deploy but fails and the restrictions aren't enforced. When i go into the details of the device on the meraki dashboard it says that profile updates are pending and the recent activity section says that the profuile failed to install. I have attached a screen shot of the error message. If anyone could help I'd be grateful. It has the potential to be a fantastic tool if it can be made to work!
Cheers,

meraki error.JPG

11th April 2013, 11:36 AM #2

In your restrictions, you need to turn off all the ones that say Supervised Devices only. The profiles have to be very specific.

They must be UNTICKED like this picture

Supervised.png

Any more help, just ask

Last edited 11th April 2013 at 11:39 AM.

Thanks to SovietRussia from:

11th April 2013, 12:15 PM #3

Brilliant thank you! It's working nicely now. If I wanted to enable the Supervised Only restrictions in a byod environment, how would I go about doing that?

6th August 2014, 09:19 AM #4

Just tired this now and the Managed Settings were pushed out fine so thanks for that

5th April 2016, 11:13 AM #5

Bump for an old thread. My devices are on 9.3.1 and are supervised by Apple Configurator, yet I still get a failure when I try to reinstall/update a profile. The profiles install fine if I re-enroll the device, but subsequent profile updates will not install.

name: School iPad, error: Profile Installation Failed, status: Error

Any ideas?

5th April 2016, 12:12 PM #6

Originally Posted by gsk

Brilliant thank you! It's working nicely now. If I wanted to enable the Supervised Only restrictions in a byod environment, how would I go about doing that?

you can only use those settings for devices that are supervised either through DEP or using AC. chances are probably slim to none for those devices being supervised...

5th April 2016, 12:27 PM #7

FYI Guys, plug an iPad with an issue into a Mac running Apple Configurator 2, there's an option to view the device's console somewhere in there, it's very verbose and has helped me figure out tons of problems!

Thanks to Blue_Cookeh from:

Planehazza (5th April 2016)

5th April 2016, 12:27 PM #8

Originally Posted by zhinkler

you can only use those settings for devices that are supervised either through DEP or using AC. chances are probably slim to none for those devices being supervised...

His message was from 2013 mate, I bumped an old thread as my issue is similar.

5th April 2016, 12:54 PM #9

Originally Posted by Planehazza

Bump for an old thread. My devices are on 9.3.1 and are supervised by Apple Configurator, yet I still get a failure when I try to reinstall/update a profile. The profiles install fine if I re-enroll the device, but subsequent profile updates will not install.

Any ideas?

Are your push certificates up to date?

Thanks to RLR from:

Planehazza (5th April 2016)

5th April 2016, 01:01 PM #10

Yup, checked earlier and it's green and valid. Currently, I'm testing a profile built in AC2.0 rather than Meraki itself. I've created and exported it, and then uploaded it to a new mobile profile that has a single tag 'Test'. I'm going to factory reset an iPad and enrol it via AC2 and see if I can push out the profile (even though AC2 should have already done this) via Meraki.

Are there any good guides out there? I'm don't 100% understand all the stages in honesty. I have all the VPP and push certs sorted, but I've no idea what the SCEP CA is or if I should even be using it. There is an entry under 'current cert' however.

Am I right in saying that AC2 is simply a way to get all the iPads named, supervised, and enrolled, ready for further management via Meraki? I have the correct MDM URL configured in AC2 so they should be enrolling just fine. App installs work fine from Meraki, as do their licensing, I just keep getting profile install errors.

These situations remind me very easily why I ditched Apple entirely. Long live Windows and Android! Having said that, I've not done and mobile device managment with Android - I'm sure that's just as much of a ball ache!

Last edited 5th April 2016 at 01:09 PM.

5th April 2016, 01:16 PM #11

Originally Posted by Planehazza

Yup, checked earlier and it's green and valid. Currently, I'm testing a profile built in AC2.0 rather than Meraki itself. I've created and exported it, and then uploaded it to a new mobile profile that has a single tag 'Test'. I'm going to factory reset an iPad and enrol it via AC2 and see if I can push out the profile (even though AC2 should have already done this) via Meraki.

Are there any good guides out there? I'm don't 100% understand all the stages in honesty. I have all the VPP and push certs sorted, but I've no idea what the SCEP CA is or if I should even be using it. There is an entry under 'current cert' however.

Am I right in saying that AC2 is simply a way to get all the iPads named, supervised, and enrolled, ready for further management via Meraki? I have the correct MDM URL configured in AC2 so they should be enrolling just fine. App installs work fine from Meraki, as do their licensing, I just keep getting profile install errors.

These situations remind me very easily why I ditched Apple entirely. Long live Windows and Android! Having said that, I've not done and mobile device managment with Android - I'm sure that's just as much of a ball ache!

Hmm, I like to use AC2 with our MDM when setting up shared iPads (like class sets).

Have you setup a supervision identity to make it so you can share the ipad supervision between your MDM and AC2? The last time I used AC2 I got an error when installing our WIFI profile but it seemed to work so just ignored it.

It might be worth plugging the iPad into the mac and looking at the AC2 ipad logs. I haven't got my mac in front of me but you can see the iPad status when plugged into AC2 which might give more information.

5th April 2016, 01:24 PM #12

"share the ipad supervision"That's a new term/concept to me. How and where do I configure that? When I do the 'prepare' stage, I have the 'Allow device to connect to other Macs' ticked (so I can get photos off etc). I'm not sure if it's bending the rules etc, but we're only using one iTunes account for all 30 iPads. We're only using free apps however, so I think we're OK. I know it's not the best way to do it, but it's how it was set up before I started and this site.

5th April 2016, 01:31 PM #13

Are your iPads in DEP (deployment enrolment program)?

5th April 2016, 01:40 PM #14

Originally Posted by RLR

Are your iPads in DEP (deployment enrolment program)?

Nope...

I was enrolling them manually by going to m.meraki.com and punching in the code, but I want to do it as part of the supervision step. Another thing that's making it annoying is our cyberoam internet access portal. I'm currently have my manager set them up as clientless so I don't need to authenticate them after joining the WiFi. This isn't the reason that they're failing the profile installation as I've tested dozens by making sure they're connected, authenticated and able to browse the Internet and install Apps (managed and manually).

Last edited 5th April 2016 at 01:47 PM.

5th April 2016, 01:54 PM #15

Are you using the free version of Meraki or the paid version? What IOS are the iPads on?

Thanks to RLR from:

Planehazza (5th April 2016)