Home
%3CLINGO-SUB%20id%3D%22lingo-sub-294412%22%20slang%3D%22en-US%22%3EKnown%20Issue%3A%20Profile%20error%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-294412%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSTRONG%3EBy%20Lee%20Yan%20%7C%20Intune%20Sr.%20Software%20Engineer%20on%20the%26nbsp%3BEnterprise%20Mobility%20and%20Customer%20Experience%20Team%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%20recently%20had%20a%20case%20escalated%20through%20all%20levels%20of%20support%20which%20took%20quite%20some%20time%20to%20troubleshoot.%20After%20working%20with%20engineering%20to%20replicate%20and%20then%20pinpoint%20the%20issue%2C%20we%20decided%20it%20would%20be%20useful%20to%20post%20a%20known%20issue%20just%20in%20case%20you've%20run%20into%20this.%20We'll%20update%20this%20post%20when%20it's%20resolved.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EThe%20scenario%3C%2FSTRONG%3E%3A%20When%20following%20the%20steps%20in%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fapple-configurator-enroll-ios%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ethis%20document%3C%2FA%3E%20(Enroll%20iOS%20devices%20with%20Apple%20Configurator)%20for%20Setup%20Assistant%20enrollment%2C%20you%20get%20%E2%80%9CInvalid%20Profile%3A%20The%20configuration%20for%20your%20iPad%2FiPhone%20could%20not%20be%20downloaded%20from%20%5BYour%20Organization%20Name%5D%E2%80%9D%20error%20after%20accepting%20%E2%80%9CApply%20configuration%E2%80%9D%20on%20the%20device.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EWhat%20is%20happening%20behind%20the%20scenes%3C%2FSTRONG%3E%3A%20The%20enrollment%20URL%20for%20the%20MDM%20server%20created%20with%20Apple%20Configurator%20did%20not%20get%20resolved%20successfully%20or%20was%20manually%20edited.%20A%20valid%20URL%20should%20start%20with%20%3CA%20href%3D%22https%3A%2F%2Fna01.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fmanage.microsoft.com%252FEnrollmentServer%252FDiscovery.svc%252FiOS%252FESProxy%26amp%3Bdata%3D04%257C01%257Ccacamp%2540microsoft.com%257C268fea68a91b43cfe7ae08d657223f87%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C636792201930210621%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C-1%26amp%3Bsdata%3D8AVertUZ27sl2DfSoIIwpDPqzUEstDAFe%252FzjzunGeVE%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmanage.microsoft.com%2FEnrollmentServer%2FDiscovery.svc%2FiOS%2FESProxy%3C%2FA%3E%3F%20while%20an%20invalid%20URL%20usually%20starts%20with%20%3CA%20href%3D%22https%3A%2F%2Fappleconfigurator2.manage.microsoft.com%2FMDMServiceConfig%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fappleconfigurator2.manage.microsoft.com%2FMDMServiceConfig%3C%2FA%3E%3F%20which%20is%20usually%20the%20original%20profile%20URL%20you%20copied%20from%20the%20Intune%20console%20for%20Setup%20Assistant%20Enrollment.%20The%20issue%20does%20not%20affect%20Direct%20Enrollment%20scenario.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EWorkaround%3C%2FSTRONG%3E%3A%20Fortunately%2C%20there's%20a%20relatively%20simple%20workaround.%20Just%20replace%20the%20invalid%20URL%20portion%20with%20the%20valid%20URL%20portion%20for%20the%20MDM%20server%20on%20the%20Mac%20computer%2C%20then%20try%20preparing%20the%20device%20again.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAgain%2C%20we'll%20update%20this%20post%20when%20the%20issue%20is%20fixed.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-294412%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20this%20post%20we%20briefly%20share%20a%20known%20issue%20-%20an%20invalid%20profile%20error%20when%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%20with%20Setup%20Assistant%20enrollment.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-294412%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eknown%20issue%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E

By Lee Yan | Intune Sr. Software Engineer on the Enterprise Mobility and Customer Experience Team

 

We recently had a case escalated through all levels of support which took quite some time to troubleshoot. After working with engineering to replicate and then pinpoint the issue, we decided it would be useful to post a known issue just in case you've run into this. We'll update this post when it's resolved. 

 

The scenario: When following the steps in this document (Enroll iOS devices with Apple Configurator) for Setup Assistant enrollment, you get “Invalid Profile: The configuration for your iPad/iPhone could not be downloaded from [Your Organization Name]” error after accepting “Apply configuration” on the device.

 

What is happening behind the scenes: The enrollment URL for the MDM server created with Apple Configurator did not get resolved successfully or was manually edited. A valid URL should start with https://manage.microsoft.com/EnrollmentServer/Discovery.svc/iOS/ESProxy? while an invalid URL usually starts with https://appleconfigurator2.manage.microsoft.com/MDMServiceConfig? which is usually the original profile URL you copied from the Intune console for Setup Assistant Enrollment. The issue does not affect Direct Enrollment scenario.

 

Workaround: Fortunately, there's a relatively simple workaround. Just replace the invalid URL portion with the valid URL portion for the MDM server on the Mac computer, then try preparing the device again.

 

Again, we'll update this post when the issue is fixed.