Skip to main content

Computers Enroll in Jamf Pro But Commands Sit Pending

Updated over 3 weeks ago

Issue Description

The MDM Profile installs successfully, but other MDM commands fail to complete. Seeing a queue of pending commands that never make it to the device, even though the Push Certificate is valid and up to date.

PI104278 - all macOS mdm commands stop pushing if a SCEP payload is issued with a blank challenge.

Evidence:

2018-04-12 11:28:59,456 \[WARN ] \[Tomcat-56 ] \[SCEP ] - $MSSCEPCHALLENGE found for a challenge password but no event listeners returned a challenge. Setting to a blank string. 2018-04-12 11:28:59,473 \[ERROR] \[Tomcat-56 ] \[InstallProfile ] - Error getting SCEP challenge response from server com.jamfsoftware.jss.exceptions.mdm.SCEPChallengeBlankException: Setting a blank challenge, returning\!

Troubleshooting Steps

If a Configuration Profile with a WiFi certificate from a SCEP server is having an issue installing, it can prevent other commands from completing.

  1. Cancel the pending SCEP profile install command and exclude the device from the scope of that profile to resume APNs communication.

  2. Then, look further into the root cause for why the server is receiving a blank challenge.


Did this answer your question?