Forum Discussion

glennsfield's avatar
glennsfield
Copper Contributor
May 26, 2021

New iPad - "Invalid profile" Apple Business manager using Enrollment program tokens

Hello,

 

I have recently created an Apple Business Manager account, purchased iPads through the Apple Business Store which linked directly into Devices under business.apple.com devices. 

 

I have configured MDM server (Intune) successfully via the Apple Business Manager. Everything seems to be Synced. For example, if I go to Intune, Enroll devices, Enrollment program tokens, I can see the new iPads in "ready to enroll". I've created a Profile and assigned it to the iPads. The state is "Not Contacted" but I figure that's normal until the enrolment is done?

 

I tried enrolling just a single iPad to start with and I'm hitting Invalid Profile (see screenshot).

 

Not sure what I've done wrong.

 

Appreciate some help.

 

Thanks

15 Replies

  • chill6755's avatar
    chill6755
    Copper Contributor

    Devices->iOS/iPadOS->iOS/iPadOS enrollment->Device platform restrictions->Select the default ->Properties->Edit (platform settings)->Set iOS/iPadOS to Allow (default is block)

  • Hi glennsfield ,

     

    In the enrollment profile, you have not selected any VPP tokens for installing the Comp portal. It is required to push Company Portal app as a VPP app and the correct token selected in the enrollment profile. Without this, enrollment will fail.

     

    Best Regards,

    Somesh

    • dkingston's avatar
      dkingston
      Copper Contributor

      So everyone says this but here's the problem. When you're subscription is the "Employee Plan" you can't generate a VPP token. And even if I go to add a device plan to ABM it wants me to select what devices to assign it to but it won't list any of the ipads i have sitting there waiting to be assigned. It's maddening because even though the devies do everything for the enrollment with entra and intune, the ipad still will not let our managed ID's login to the ipads as the main id, says we can only do work profiles.

  • kt9084's avatar
    kt9084
    Copper Contributor
    Was this ever resolved? I'm getting this same error now.
    • Kevin Remde's avatar
      Kevin Remde
      Copper Contributor
      Me too... brand new setup, Configurator 2, ABM, and Intune.
      iPads were purchased via a consumer retail Apple store, so no reseller or organization ID.
    • simmei's avatar
      simmei
      Copper Contributor

      I saw this error on a tenant where the mobile device management authority (https://endpoint.microsoft.com/#view/Microsoft_Intune_Enrollment/ChooseMDMAuthorityBlade) was not configured.

  • HI,

    Could you confirm al the tokens are still valid?
    How are the devices enrolled into the ABM, with the apple configurator or by the supplier?
    • glennsfield's avatar
      glennsfield
      Copper Contributor

      Rudy_Ooms_MVP thanks for your reply. They are enrolled into ABM by the supplier (purchased through Apple Business Store). The token is valid as far as I can see.

       

      Additional screenshots provided.

       

      I've since tried updating the iPad through iTunes and performed a factory reset. Still the same error.

Resources