BlackBerry Mobile Fusion

[latino99]

get this while activating an iphone.

also the android gets the warning while activating, but can be activated.

[geh_dirt]

It might help, if you gave us the entire error message.

Without that, I would suggest the normal stuff.

Do you have the correct ports opened?

Did you complete the APN cert with Apple?

Did you use a real certificate for the SSL on your UDS server, instead of a "self-signed" one?

[latino99]

hi. the ports should be configured, apn is installed but I use a ssl wildcard :  *.arcticsec.no certificate

but the internal servers fqdn is xxxxxxxxx.z26.no.tconet.net and the public dns is: mdm.arcticsec.no

this is only for internal network test

the android get the warning that certificate is not trusted but are able to continue.

anyone know have a tip on how to check if the certificate is approved by apple ?

[oliwer]

You do not have to aprove that cert by apple, but you need to import the root ca certificate on the iOS device before you can start enroll those devices.
The certificate only needs to match the public dns, not the internal FQDN

[latino99]

ok can the root cert be self signed og a wildcard cert?

or does it have to be a ssl certificate made for mdm.arcticsec.no ?

tried to install the wildcard cert localy on iphone and android. not approved.

[oliwer]

the wildcard cert is okay. But you do not have to import this cert, you have to import the cert from the CA that generated that cert.
On Android you do not need to import the cert at all, you can continue on the screen with the "not trusted" message.

[latino99]

ok thanx, but what about the iphone ?
the activation gos so far as :

- To complete the activation process you need to install a certificate.
Click OK to be directed to the iOS Mobiel Device Management site and wait for the activation to complete.
- Complete the steps for successful activation of you device . please wait while the enrollment process for the iso mdm protocol is started.

wich after this webpage appears :

https://mdm.arcticsec.no/ios/enroll/2/Norwegian%20(Bokmål)/6.0

and there it stops.

if i go to previous page and try again the app gives me this message: error 3006: Your device cannot be activated at this time. please try again later or contact your administrator.

[geh_dirt]

If you can avoid it... You do not want to use a "Wild-Card" SSL.  The install does not know how to handle the Cert, and it reads the wrong Thumbprint.

I am speaking from my own personal experience.

If you can't avoid it at all... then you will need to modify the database record manually, to put the correct thumbprint into the record.

****** WARNING!  These details are not documented, and may not be supported by RIM  ******

You are most likely seeing an error similar to this "No certificates with key 'xxxxxxxxxxxxxxxxxxx' found in the store", in your logs (I forget which one)...

That "key" should be the "Thumbprint" for your Wild-Card SSL, but the dbo.sys_global probably has the Thumbprint of the intermediate, or the CA of your SSL.

For me... it was the intermediate certifier.

To resolve the problem, I opened the dbo.sys_global and edited the certificate.ssl.subject to contain the correct thumbprint, and that resolved the problem.

If you are not familiar with MS SQL Server Management Studio, or with SSL Thumbprint information, you should seriously consider purchasing a new SSL, that is named to your UDS server.

Good Luck...

[latino99]

ok. I`ll try this first.

[latino99]

hey I have been looking for some tool to edit the database, but can`t seem to find any software that allows me to edit.

is it possible to access the database in another way than visual management studio ?