Forum Discussion
joshdoty
Aug 25, 2021Copper Contributor
Intune/Company Portal Constant popups
Hey We're trying to use intune for our mostly catalina and Bigsur macos fleet, and we're noticing on multiple peoples machines that they'll get regular popups mentioning they need to approve Profiles/MDM.
Even after using their finger/password to approve the changes, they'll get new pop ups.
I don't see any mention in the system.log regarding this popup.
If I look in the Intune MDM logs the only regular errors that i see are regarding a "microsoft.com requires a client cert" but i'm not sure if this is related.
NSLocalizedDescription=The Internet connection appears to be offline., NSErrorFailingURLStringKey=https://manage.microsoft.com/RestUserAuthLocationService/RestUserAuthLocationService/Certificate/ServiceAddresses, NSErrorFailingURLKey=https://manage.microsoft.com/RestUserAuthLocationService/RestUserAuthLocationService/Certificate/ServiceAddresses, _kCFStreamErrorDomainKey=1})
error 1: authenticationError(Error Domain=NSURLErrorDomain Code=-1206 "The server “manage.microsoft.us” requires a client certificate." UserInfo={NSLocalizedDescription=The server “manage.microsoft.us” requires a client certificate., NSErrorFailingURLStringKey=https://manage.microsoft.us/RestUserAuthLocationService/RestUserAuthLocationService/Certificate/ServiceAddresses, NSErrorFailingURLKey=https://manage.microsoft.us/RestUserAuthLocationService/RestUserAuthLocationService/Certificate/ServiceAddresses, _NSURLErrorRelatedURLSessionTaskErrorKey=(
_NSURLErrorFailingURLSessionTaskErrorKey=LocalDataTask <####.>.<####>, NSUnderlyingError=0x7fe4e552daf0 {Error Domain=kCFErrorDomainCFNetwork Code=-1206 "(null)" UserInfo={NSErrorPeerAddressKey=<CFData 0x7fe4e565bb30 [0x7fff807deb70]>{length = 16, capacity = 16, bytes = 0x100201bb17610d070000000000000000}}}})
error 5: authenticationError(Error Domain=NSURLErrorDomain Code=-1206 "The server “manage-selfhost.microsoft.com” requires a client certificate." UserInfo={NSLocalizedDescription=The server “manage-selfhost.microsoft.com” requires a client certificate., NSErrorFailingURLStringKey=https://manage-selfhost.microsoft.com/RestUserAuthLocationService/RestUserAuthLocationService/Certificate/ServiceAddresses, NSErrorFailingURLKey=https://manage-selfhost.microsoft.com/RestUserAuthLocationService/RestUserAuthLocationService/Certificate/ServiceAddresses, _NSURLErrorRelatedURLSessionTaskErrorKey=(
2 Replies
Sort By
- CarloLamannaCopper ContributorHi joshdoty,
I'm having similar issue, have you managed to resolve it some way?
Thanks,
Carlo- joshdotyCopper ContributorHey Carlo,
We determined the error was due to a SCEP certificate authentication issue. My guess is that our macos clients kept trying to authenticate to our SCEP server and would fail and constantly show this popup window to try and authenticate to the server to generate the cert.
I would check all of your MDM profiles and make sure any certs or credentials that you use/provide are valid.
And if you've done this try removing all profiles and slowly add them back one by one to try and recreate the issue.