Skip to Content
1

Apple Push not working after applying WIFI profile with certificate

Nov 21, 2016 at 06:59 AM

49

avatar image
Former Member

Hello Experts,

I am having a "strange looking" problem at a customer where I need you help to solve. The customer has a Microsoft PKI configured in Afaria, and we want to publish WIFI Policies configured for certificate based authentication. Later the customer also wants to use certificates for authentication on the Exchange infrastructure.

The problem we are facing is as follows. As soon as the WIFI policy including the user certificates is applied on the iOS device, the device is not able more to receive Apple Push Notifications. As soon as I deactivate the policy and enroll the device again, push notification is working again until I am applying the WIFI Policy again. The WIFI network itself is not causing that troubles – all needed ports are open. And even when switching OFF WIFI the Apple Push Notifications are still not coming.

The Infrastructure is as follows:

Afaria 7 SP19 (updated today) on Windows Server 2012 R2

MS SQL Database

MS-PKI (3-tier infrastructure with a Root CA, a Policy CA on each site and an Issue CA on each site) – the certificates for the MDM are issued from the issueCA using templates we created according the following SCN article https://wiki.scn.sap.com/wiki/display/SAPMOB/1.2+-+Preparing+the+certificate+template+for+Wifi+authentication

We can't find any "interesting information" in the Server Logs. I already contacted the SAP support - but they are pointing me to the configuration of the CA.

Did anybody of you have had the same problem like I have? Than i would be more than happy if you could give me some hints on how to troubleshoot the issue.

The CA for WIFI is configured as follows:

Please see the following screenshots on how we created the policy:

Is it OK that the certificate is showing um under the Category "Device Identity Certificates"? Please ignore the Expiry Date - the screenshot is already little older - the issued user certificate are expiring within 4 weeks.

Thank you for your help :)

br

Ernst

10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

1 Answer

avatar image
Former Member Jan 04, 2017 at 10:17 AM
1

Hello Experts,

The problem has been solved - it was a problem in the template of the PKI.

br

Ernst

Share
10 |10000 characters needed characters left characters exceeded