Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 5 replies
  • Subscribers 5 subscribers
  • Views 16392 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SMC5 and Apple Configurator

Detlef

I just installed a new server with SMC5, no data-import, plain-vanilla-installation. What about the SMC-Integration with apple configurator? What about the auto-enrollment-feature? Do I still have to follow https://www.sophos.com/en-us/support/knowledgebase/121129.aspx ? Or is there a much better way?

I hope that the SMC5-Documentation will be uploaded within the next days?

Cheers, Detlef

:56584


This thread was automatically locked due to age.
  • 0

    Hm, not sure whether it was necessary or not, but I followed https://www.sophos.com/en-us/support/knowledgebase/121129.aspx and was able to enable the auto-enrollment in the device-group. A new feature "Install SMC-App" is added.

    USE SMCDBv2
    INSERT INTO mdm_rolerightrel (RoleId, RightId) values (1, 217);
    INSERT INTO mdm_rolerightrel (RoleId, RightId) values (2, 217);
    INSERT INTO mdm_rolerightrel (RoleId, RightId) values (1, 218);
    INSERT INTO mdm_rolerightrel (RoleId, RightId) values (2, 218);

    Cheers, Detlef (still longing for more Documentation as PDF)

    :56589
  • 0

    To support Apple Configurator deployments, go to a group and select the "Enable auto-enrollment" button. This gives you an URL which you have to use in Apple Configurator. All devices using this URL will enroll in this specific group

    The SMC5 Admin documentation is already live in English. Other languages will follow latest by April 24th

    :56605
  • 0

    Thank you TLI, I already found it. Concerning the documentation: I do miss the technical guide, the user guides and last but not least the administrator guide in book-form (pdf). Yes, it's much easier to implement help-files but I think I'm not the only one who loves pdf's and the ability to print it for offline-use. So I hope that Sophos does not cancel all the mentioned guides in book-form.

    Cheers

    Detlef

    :56628
  • 0

    Hi,

    we made an update to SMC5. Because of the missing SMS activattion for new devices we now have activate the auto-enrollment for one group include to install the SMC app. We configured the MDM server URL like it's discribed in the article (https://www.sophos.com/support/knowledgebase/121709.aspx). When we woud like to activate one device (iPhone) and apply the configuration, we got the error messege "NSURLErrorDomain-Error- 1012 (see attached picture) on the mobiel device. Has anyone any idea what's  the problem?

    Regards
    Philipp

    :57638
  • 0

    The error "NSURLErrorDomain-Error- 1012" occurs during Auto Enrollment when a self-signed certificate is used for the Sophos Mobile Control (SMC) server.

    To succesfully enroll a device, the CA certificate must be added to the Auto Enrollment configuration.
    To do so, create a profile in the Apple Configurator and add the certificate of the CA (crt file). If the self-signed certificate for the SMC server was created in the SMC Configuration Wizard, you can find the file in the folder "%MDM_HOME%\tools\Wizard\certs" on the SMC server.
    This profile then must be installed during configuration of the iOS device in the Apple Configurator by checking the box for the profile. Please see the attached screenshots regarding those settings.

    Make sure there's no entry for the device in the SMC Web Management before starting a new Auto Enrollment, as enrollment will fail due to a duplicate UDID.

    :57643
Unfiltered HTML