Security

Reply
MVP
Posts: 1,110
Registered: ‎10-11-2011

Onboarding fails - can't determine trusted identity

I have an issue onboarding one Mac.  The user reports that onboarding fails during profile installation.  The application log shows the following:

 

Client: X.X.X.X:56921
Script: /onboard/mdps_profile.php
Function: NwaMdpsLogAndReportError
Arguments: array (
'error' => 1,
'message' => 'Cannot determine trusted identity of certificate: /CN=XXXXXXXXXXXXXX',
)

 

The user has added the Onboarding Root CA to their cert store.

 

Any thoughts?

=======================================
If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users.
MVP
Posts: 4,183
Registered: ‎07-20-2011

Re: Onboarding fails - can't determine trusted identity

 

 

Can you verify if the device cert/cred were not revoked

 

 

2014-02-18 06_42_55-Certificate Management.png

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
MVP
Posts: 1,110
Registered: ‎10-11-2011

Re: Onboarding fails - can't determine trusted identity

The certificate was valid when the Mac tried onboarding first.  I deleted the certificate and the Mac had the same error message.

 

The solution (if you can call it one) was to reinstall the OS on the Mac.  The user took it upon himself to do this, and is not my suggestion as it's pretty extreme.  The issue was definitely client side, but I wish I would've been able to nail it down.

=======================================
If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users.
Occasional Contributor II
Posts: 19
Registered: ‎03-26-2012

Re: Onboarding fails - can't determine trusted identity

any one find fix for this? we having same issues with multiple iphones and ipad lately. Just started happening last week.

 

Super Contributor II
Posts: 383
Registered: ‎09-05-2012

Re: Onboarding fails - can't determine trusted identity

Hi,

 

I can confirm that we are seeing this issue as well.

Something new, I was actually trying to test something different.

 

Tested on iPad Mini running iOS 7.0.6

 

CPPM 6.2.2

Aruba
Posts: 1,537
Registered: ‎06-12-2012

Re: Onboarding fails - can't determine trusted identity

make sure you have the IOS patch installed.

 

http://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=13780

 

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Super Contributor II
Posts: 383
Registered: ‎09-05-2012

Re: Onboarding fails - can't determine trusted identity

hey tarnold,

 

thank you sir.

 

We are a few patches behind so I need to get our CPPM up to date and then load that patch.

 

We are running 6.2.2 and are waiting to install patch 6.2.6.

The iOS patch appears to be separate. I will download and install once we can patch our system first.

 

Cheers

Search Airheads
Showing results for 
Search instead for 
Did you mean: