Users installing the Sophos Cloud Web Gateway iOS agent profile onto a device running iOS 11 may observe failures with a "SCEP returned an invalid response" error present. The following sections are covered:
Applies to the following Sophos products and versions Sophos Cloud Web Gateway
Should the CWG iOS agent profile fail to install and the "SCEP returned an invalid response" error be seen, confirm that all necessary traffic is allowed through applicable firewalls per KB123602 linked below. It should also be confirmed that the iOS device in question be supervised per KB122921.
If both articles above are followed and the installation failure and error persists, it may be due to a change in behavior in iOS 11 causing the profile installation to fail. Sophos engineers are working to address this issue and further updates will be provided through this article.
If there are any questions in addition to this article, please reach out to Sophos Support and reference knowledge base article 127846.
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.