MDM Troubleshooting

1.What should I do if I get error message: "The Enrollment token is already being used or is not valid."?

It is likely that you are attempting to re-enroll with an old enrollment token. Create a new re-enrollment token in the Web Console and use that one instead. It is also possible that you are attempting a second re-enrollment  too  soon after the first one. Verify that the re-enrollment token  is different from the first one. If it is not, then wait a few minutes and try to generate a new re-enrollment token again.

2.What should I do if I get error message:"service certificate validation failed"?

This error message indicates that there is a problem with your APNS or GCM service certificate. This is announced in ESMC Web Console as one of the following warnings under MDM Core alerts:

GCM service certificate validation failed (0x0000000100001002)

APNS service certificate validation failed (0x0000000100001000)

APNS Feedback service certificate validation failed (0x0000000100001004)

Make sure you have the correct certificate authority available on your system:

APNS certificate authority: Entrust Certification Authority, need to validate certificate from gateway.push.apple.com:2195;

APNS Feedback certificate authority: Entrust Certification Authority, need to validate certificate from feedback.push.apple.com:2196;

GCM certificate authority: GeoTrust Global CA, need to validate certificate from android.googleapis.com:443.

The desired certificate authority should be included in the certificate store on the MDM host machine. In a Windows system, you can search for "Manage Trusted Root Certificates". In a Linux system, the certificate location is dependent on the distribution you are using. Some examples of certificate store destinations include:

on Debian, CentOS: /usr/lib/ssl/cert.pem, /usr/lib/ssl/certs;

on Red Hat: /usr/share/ssl/cert.pem, /usr/share/ssl/certs;

command openssl version -d usually returns desired path.

If the desired certification authority is not installed on the system the MDM Core is running on, install it. Following installation, restart the ESMC MDC service.

validation-status-icon-error WARNING

Use caution, certificate validation is a security feature, so if the warning occurs in web console it could also indicate a security threat.