Forum Discussion
macOS Onboarding - Profile installation failed
0Hi at all 🙂
Hope you can help me with my onboarding problem with macOS 🙂
I have a user with a existing macOS device. In the Microsoft Learn docs I found that it is possible to add existing devices without the need of completely reset them. The device is company owned and registered in Apple School Manager.
- device successfully transferred to Intune
- device added to enrollment profile
- enrollment restrictions: BYOD not allowed
For onboarding I´ve downloaded and started the company portal app and logged in. Then i downloaded the profile and pressed on the install button.
Then following message appears:
How can i fix this, can find any solution 😞
4 Replies
Not sure if this helps you, it was 5 months ago you posted, but putting this here for others that might have similar problems. Since you mention you mentioned an existing device? Have it been enrolled previously? I just had this problem after I reset a machine for ex-employee, but I had forgotten to delete it from Intune, so the serial number ( I suppose ) was locked, and I couldn't enroll it (got the above error message when installing profiles). After deleting the entry from Intune, the enrollment started working again.
theunknown Hi, I would start with this evidence:
-Download a New Profile:
Go back to the Company Portal app and initiate a new profile download. It’s possible that the profile expired during the initial download process, and starting fresh might resolve the issue.
-Check Network Connection:
Ensure that the macOS device has a stable and reliable internet connection during the profile installation process. This error can occur if the device cannot properly connect to the necessary services to complete the profile download and installation.
-Date and Time Settings:
Check that the date and time on the macOS device are correctly set. If the device’s date and time are not synchronized (especially if they differ significantly from server time), it may result in an expired or invalid profile.
-Reboot the Device:
Try restarting the macOS device before downloading the new profile. A reboot can sometimes resolve temporary connectivity or credential caching issues.
-Check Intune Enrollment Profile:Ensure that the enrollment profile in Intune is still active and has not been altered or expired. Verify that the profile is still associated with the correct group or device.
-Update macOS:
Ensure that the macOS device is up to date with the latest updates. Older versions of macOS may have issues with profile installation services.
micheleariis wrote:theunknown Hi, I would start with this evidence:
-Download a New Profile:
Go back to the Company Portal app and initiate a new profile download. It’s possible that the profile expired during the initial download process, and starting fresh might resolve the issue.
Tried it four times with the profile. Also restarted the mac and the company portal app. Always the same error.
-Check Network Connection:
Ensure that the macOS device has a stable and reliable internet connection during the profile installation process. This error can occur if the device cannot properly connect to the necessary services to complete the profile download and installation.
Connection is stable.
-Date and Time Settings:
Check that the date and time on the macOS device are correctly set. If the device’s date and time are not synchronized (especially if they differ significantly from server time), it may result in an expired or invalid profile.
All setup right.
-Reboot the Device:
Try restarting the macOS device before downloading the new profile. A reboot can sometimes resolve temporary connectivity or credential caching issues.
Already tried.
-Check Intune Enrollment Profile:Ensure that the enrollment profile in Intune is still active and has not been altered or expired. Verify that the profile is still associated with the correct group or device.
Token is valid and active. Enrollment profile is assigned to the device.
-Update macOS:
Ensure that the macOS device is up to date with the latest updates. Older versions of macOS may have issues with profile installation services.
15.0.1 Sequoia is on the device.
Any other ideas micheleariis ?
theunknown Are there other management profiles installed on the mac?
On another mac no problem?Revoke the Profile:
Go to Microsoft Endpoint Manager > Devices > macOS and locate the specific device. Remove the existing enrollment profile from the device.
Remove Conflicting Profiles or MDMs:
Check if there are existing profiles or MDM configurations on the macOS device that might be conflicting with the new profile.
Go to System Preferences > Profiles on the macOS device and remove any existing management profiles.
If the macOS device has been enrolled in another MDM system in the past, completely remove any traces of the previous MDM (Mobile Device Management) system before attempting to re-enroll in Intune.Check the Keychain Access for Invalid Certificates:
Sometimes, invalid or expired certificates in the macOS Keychain Access can cause issues with profile installation.
Open Keychain Access on the macOS device, search for any expired certificates, and remove them.
After clearing any expired certificates, restart the device and retry the profile installation.Reinstall Company Portal:
If there is a problem with the Company Portal app itself, uninstalling and reinstalling the app could help.
Completely remove the Company Portal app from the macOS device, restart the computer, and reinstall the latest version from the App Store.
Try the enrollment again after the fresh install.
