IPhone profile Installation Failed The SCEP server returned an invalid response

Hey all - I have a DEP iPhone - during OOBE for the phone on the "configuring iPhone" page just after "Data & Privacy" it receives the error "profile installation Failed The SCEP server returned invalid response."

I have tried different networks and phone data, I have tried to connected to iTunes but it obviously says "The iPhone is Supervised by another Computer and cannot be used with this computer" (we have a policy that puts this in place so I assume this is why)

I have removed the phone from our Intune altogether (changed the server on apple business manager to unassigned and deleted from enrollment program tokens).

Is there some kind of way to forcibly reset it before its even set up without iTunes?

I'm trying to experiment with configuration profiles and in order to do that I am starting out with one created by Apple's Profile Manager application that uses SCEP. When I take the .mobileconfig file and install in on the device (using Apple Configurator 2) it installs fine without any issue.

However, I noticed that if I modify anything in this profile (even something minor like "PayloadDisplayName") the enrollment process gets to the end but ends up failing with this error:

Profile Installation Failed: The SCEP server returned an invalid response

Looking at console logging doesn't show much of use:

default 14:00:17.421822-0700 profiled Could not retrieve issued certificate: NSError: Desc : The SCEP server returned an invalid response. US Desc: The SCEP server returned an invalid response. Domain : MCSCEPErrorDomain Code : 22013 Type : MCFatalError error 14:00:17.422199-0700 profiled Cannot retrieve SCEP identity: NSError: Desc : The SCEP server returned an invalid response. US Desc: The SCEP server returned an invalid response. Domain : MCSCEPErrorDomain Code : 22013 Type : MCFatalError error 14:00:17.422306-0700 profiled Rolling back installation of profile

It seems there is some sort of signing or checksum being used, but this is strange since the profile specifically says it is not signed. Looking at all the fields in use, the only thing I can guess is that the challenge field is somehow involved. Apple's documentation gives a hint about this field here:

The front end service can be set up to gate access by means of a challenge, which in practice is an authorization token (a one-time password, or a signed/encrypted blob containing user/device info) to allow automatic issuing of a certificate.

However the above is only a recommendation, and I am not able to find out how the challenge parameter is actually defined (the value I am using is oBGLAsWsMWnHiycHpBaHXNmVEDevrLt). I'm using the SCEP server that comes with Profile Manager but I have been unable to find any documentation about this, and the logging that is supposed to be present in the console log (with key "com.apple.SCEP") doesn't seem to exist.

If I remove the challenge parameter completely from the profile, I get a prompt during device enrollment, but I'm not sure what I should be putting in there.

If anyone has any ideas, please let me know.

UDPATE: Looking in /Library/Logs/ProfileManager/dmSCEPService.log I see these errors:

0:: [335] [2019/06/19 14:00:16.917] Certificate placeholder with challengePassword not found 0:: [335] [2019/06/19 14:00:16.917] EXCEPTION: SCEP BAD CHALLENGE <SCEP BAD CHALLENGE> USERINFO: { NSLocalizedDescription = "Unknown error 20"; }

This confirms it is the challenge causing the issue, but I'm not sure how to generate a proper challenge so things will succeed.

Symptom

The iOS enrollment fails with the iOS device reporting the following error message:

"Profile Installation Failed

The SCEP server returned an invalid response."

Read more...

Environment

SAP Afaria 7

Product

SAP Afaria 7.0

Keywords

KBA , MOB-AFA , Afaria , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.

  1. Home
  2. Ios
  3. Testflight Profile Installation Failed The Scep Server Return An Invalid Response

IPhone profile Installation Failed The SCEP server returned an invalid response
IPhone profile Installation Failed The SCEP server returned an invalid response
IPhone profile Installation Failed The SCEP server returned an invalid response
IPhone profile Installation Failed The SCEP server returned an invalid response
IPhone profile Installation Failed The SCEP server returned an invalid response
IPhone profile Installation Failed The SCEP server returned an invalid response
IPhone profile Installation Failed The SCEP server returned an invalid response
IPhone profile Installation Failed The SCEP server returned an invalid response

Testflight Profile Installation Failed, the SCEP server return an invalid response

Tags: ios , iphone , testflight Answers: | Viewed 12,410 times

One of my user is having trouble installing the TestFlight App (not Apple's TestFlight).

He encountered the error: "Profile Installation Failed, the SCEP server return an invalid response."

IPhone profile Installation Failed The SCEP server returned an invalid response

I advise him to follow the steps listed here:
http://help.testflightapp.com/customer/portal/articles/402816-registration-issues

He told me that he has no profile installed in his profiles and after following the steps, he still encounter the same error.

I at a lost as to what to do now and any advise will be appreciated.



Intune for iOS "Profile Installation Failed. The SCEP server …

1 day ago Jul 11, 2018  · Having the same issue when trying to reset iPhone after profile installation failure. Never had an issue in the past and a solution would be ideal to get these phone working. Tuesday, February 11, 2020 9:06 PM

Show details

See also: File

iOS : Testflight Profile Installation Failed, the SCEP server …

1 week ago Jan 08, 2022  · iOS : Testflight Profile Installation Failed, the SCEP server return an invalid response [ Gift : Animated Search Engine : https://bit.ly/AnimSearch ] iOS :...

Show details

See also: File

Troubleshooting - SCEP Server Returned an Invalid …

1 week ago Feb 25, 2022  · This will download and install a fresh image of the latest iOS on the device. If you can't update or restore your iPhone, iPad, or iPod touch ... Try building a new DEP profile and assign it to the device. ... SCEP Server Returned an Invalid Response. URL Name. troubleshooting-scep-server-returned-an-invalid-response. Was this article helpful ...

Show details

See also: Image Rest File Date

Profile Installation Failed - The SCEP se… - Apple …

1 week ago Apr 06, 2017  · Now after the blueprint and profiles are loaded onto the devices via the MDM, I try to enroll them and get "Profile Installation Failed - The SCEP server returned an invalid response". I know this has something to do with not removing the devices via profile manager first. I think the profile manager still thinks the devices are managed.

Show details

See also: File

Profile Installation Failed: The SCEP server returned an …

1 week ago Jun 18, 2019  · Profile Installation Failed: The SCEP server returned an invalid response Looking at console logging doesn't show much of use: default 14:00:17.421822-0700 profiled Could not retrieve issued certificate: NSError: Desc : The SCEP server returned an invalid response. US Desc: The SCEP server returned an invalid response.

Show details

See also: File

Error: "Profile Installation Failed. The SCEP server returned …

3 days ago "Profile Installation Failed. The SCEP server returned an invalid response." iOS Console or Xcode logs show: Feb 9 16:23:26 iPad profiled[129] <Notice>: (Note ) MC: Could not retrieve issued certificate: NSError: Desc : The SCEP server returned an invalid response. US Desc: The SCEP server returned an invalid response.

Show details

See also: File

Solved: Profile Installation Failed - Jamf Nation …

4 days ago Mar 20, 2021  · Jamf helps organizations succeed with Apple. By enabling IT to empower end users, we bring the legendary Apple experience to …

Show details

See also: File

DEP Enrollment (ios) only works sporadically since 29/10/19

1 day ago Oct 30, 2019  · The Scep server returned an invalid response This is happening on multiple devices. BR Tim. Labels: Labels: Intune; Mobile Device Management (MDM) Tags: DEP. Preview file 10309 KB Preview file ... Profile Installation Failed. The …

Show details

See also: Ios File

The SCEP server returned an invalid response #6 - GitHub

1 week ago Aug 01, 2014  · Aug 1 09:00:56 TheVilain profiled[11158] : (Error) MC: Installation failed. Error: NSError: Desc : Échec d’installation du profil Sugg : Le serveur SCEP a renvoyé une réponse non valide. US Desc: Profile Installation Failed US Sugg: The SCEP server returned an invalid response. Domain : MCInstallationErrorDomain Code : 4001

Show details

See also: File

2332416 - iOS enrollment failed : "Profile Installation Failed ... - SAP

1 day ago 2332416-iOS enrollment failed : "Profile Installation Failed. The SCEP server returned an invalid response." The SCEP server returned an invalid response." - Afaria

Show details

See also: File

Error: “Profile Installation Failed - The SCEP server returned an ...

6 days ago Feb 24, 2017  · We have a strong suspicion that “Profile Installation Failed - The SCEP server returned an invalid response” would be caused by the wrong timezone. It's possible that this issue has to do with the devices attempting to contact Apple's time servers.The waiting could allow the action to time out, at which point location services would kick in ...

Show details

See also: File

Please leave your answer here:

How do I fix SCEP server returned an invalid response?

The SCEP server returned an invalid response." During XenMobile DEP Enrollment..
Check if the MDM SSL certificate is publicly trusted by iOS. ... .
Full wipe the iOS device or try another unopened iOS DEP device out of box..
Check if a non-DEP iOS enrollment works on the same WiFi network..

What does it mean when the SCEP server returned an invalid response?

What does the error mean? This error can occur when a SCEP (Simple Certificate Enrollment Protocol) connection is interrupted when DEP enrolling.

What does Profile installation failed mean?

A connection to the server could not be established." This problem can happen if an older version of Norton Family profile is installed on your device. To fix this problem, remove and reinstall the Norton Family profile on your iOS device.

How do I setup a SCEP server?

Windows ( SCEP server).
Configure IP address and hostname..
Install Windows Certificate Services..
Manage the SCEP server..
Configure the IP address and HTTPS server..
Import the SCEP server CA certificate..
Create a new key pair and submit the request to the server..