Unable to re-enrol mac to Intune - Profile Installation failed

%3CLINGO-SUB%20id%3D%22lingo-sub-2763878%22%20slang%3D%22en-US%22%3EUnable%20to%20re-enrol%20mac%20to%20Intune%20-%20Profile%20Installation%20failed%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2763878%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3EI%20am%20unable%20to%20re-enrol%20mac%20to%20Intune.%20I%20get%20error%20the%20attached%20error%20message%20while%20downloading%20profile%20from%20company%20portal.%20Profile%20Installation%20failed%20-%20Could%20not%20download%20the%20identity%20profile%20from%20encrypted%20profile%20service.%20The%20credentials%20within%20the%20device%20enrolment%20profile%20may%20have%20expired.%3C%2FP%3E%3CP%3EAny%20idea%20what%20could%20be%20the%20issue%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJust%20a%20side%20note%2C%20this%20is%20a%20brand%20new%20mac.%20First%20time%20enrolment%20worked%20perfectly%20but%20when%20i%20retired%20the%20device%20from%20Intune%20and%20tried%20to%20re-enrol%2C%20i%20get%20this%20error.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3EYash%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2763878%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2764568%22%20slang%3D%22en-US%22%3ERe%3A%20Unable%20to%20re-enrol%20mac%20to%20Intune%20-%20Profile%20Installation%20failed%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2764568%22%20slang%3D%22en-US%22%3EJust%20to%20be%20100%25%20sure..%20there%20are%20no%20enrollment%20restrictions%20configured%20%3F%20to%20prevent%20macos%20from%20registering%20in%20intune%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2770502%22%20slang%3D%22en-US%22%3ERe%3A%20Unable%20to%20re-enrol%20mac%20to%20Intune%20-%20Profile%20Installation%20failed%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2770502%22%20slang%3D%22en-US%22%3E%3CP%3EYes%2C%20we%20have%20Enrollment%20Restrictions%20rules%20set%20in%20a%20way%20that%20it%20should%20allow%20me%20to%20enrol%20personal%20mac.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2772757%22%20slang%3D%22en-US%22%3ERe%3A%20Unable%20to%20re-enrol%20mac%20to%20Intune%20-%20Profile%20Installation%20failed%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2772757%22%20slang%3D%22en-US%22%3EAfter%20you%20have%20retired%20the%20device%2C%20could%20you%20check%20what%20happens%20when%20you%20manually%20delete%20the%20device%20from%20intune%20and%20try%20again%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2777073%22%20slang%3D%22en-US%22%3ERe%3A%20Unable%20to%20re-enrol%20mac%20to%20Intune%20-%20Profile%20Installation%20failed%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2777073%22%20slang%3D%22en-US%22%3EUnfortunately%20I%20have%20only%201%20macbook%20for%20test%20so%20i%20cannot%20really%20reproduce%20the%20error.%20Device%20is%20not%20showing%20up%20in%20intune.%20Do%20we%20have%20to%20delete%20something%20locally%20from%20macbook%20%3F%20maybe%20old%20profile%20files%20are%20stored%20somewhere%3C%2FLINGO-BODY%3E
Contributor

Hi,

I am unable to re-enrol mac to Intune. I get error the attached error message while downloading profile from company portal. Profile Installation failed - Could not download the identity profile from encrypted profile service. The credentials within the device enrolment profile may have expired.

Any idea what could be the issue?

 

Just a side note, this is a brand new mac. First time enrolment worked perfectly but when i retired the device from Intune and tried to re-enrol, i get this error.

 

 

Regards,

Yash

5 Replies
Just to be 100% sure.. there are no enrollment restrictions configured ? to prevent macos from registering in intune?

Yes, we have Enrollment Restrictions rules set in a way that it should allow me to enrol personal mac.

After you have retired the device, could you check what happens when you manually delete the device from intune and try again?
Unfortunately I have only 1 macbook for test so i cannot really reproduce the error. Device is not showing up in intune. Do we have to delete something locally from macbook ? maybe old profile files are stored somewhere
This is resolved. I deleted all the credentials related to my work or school account from Keychain, uninstalled Company Portal, tried again - it worked.