We are developing an MDM (Mobile Device Management) solution for device management purposes, and our current implementation process is as follows:
1. Configure DEP profile to obtain profile_uuid
We configured a DEP profile with the following parameters to retrieve the profile_uuid:
{
"allow_pairing": true,
"anchor_certs": [],
"auto_advance_setup": true,
"await_device_configured": false,
"configuration_web_url": "",
"department": "test define profile",
"devices": ["MNWF07QD9M"],
"is_mandatory": false,
"is_mdm_removable": false,
"is_multi_user": false,
"is_supervised": true,
"language": "zh",
"org_magic": "",
"profile_name": "Enrollment Profile - MNWF07QD9M",
"region": "cn",
"skip_setup_items": [
"Accessibility",
"ActionButton",
"Android",
"Appearance",
"AppleID",
"AppStore",
"Biometric",
"CameraButton",
"DeviceToDeviceMigration",
"Diagnostics",
"EnableLockdownMode",
"FileVault",
"iCloudDiagnostics",
"iCloudStorage",
"iMessageAndFaceTime",
"Intelligence",
"Keyboard",
"MessagingActivationUsingPhoneNumber",
"Passcode",
"Payment",
"Privacy",
"Restore",
"RestoreCompleted",
"Safety",
"ScreenTime",
"SIMSetup",
"Siri",
"SoftwareUpdate",
"SpokenLanguage",
"UpdateCompleted",
"WatchMigration",
"WebContentFiltering"
],
"supervising_host_certs": [],
"support_email_address": "",
"support_phone_number": "",
"url": "https://mdmp.com/mdm/apple/enroll?shopId=1"
}
We sent a POST request to the /profile endpoint with the above payload, and the response returned the profile_uuid: 605FB5C274303C19189C9B99DCD3280D.
2. Assign the profile
We sent a POST request to the /profile/devices endpoint, including the aforementioned profile_uuid and the target devices list in the request body.
3. Scan the device with Apple Configurator 2
We used Apple Configurator 2 to scan and enroll the target device.
Issue Encountered
After the device restarts twice, it fails to retrieve the mobileconfig file from the URL: https://mdmp.com/mdm/apple/enroll. We are using Nginx as the web server and have enabled access logging, but the logs show no incoming requests from the device to the /mdm/apple/enroll endpoint at all.
Could you please help identify where we might have made a mistake in this process?
Topic:
Business & Education
SubTopic:
Device Management