Skip to main content

Expired Signing Certificate Message in Jamf School

Updated over 2 weeks ago

Description

Devices display an expired (or expiring soon) signing certificate message for the *.jamfcloud.com certificate in the MDM profile.

This photo is an example of the error that you may be seeing in your signing certificates.

The expiration date of the *.jamfcloud.com Signing Certificate in the MDM profile is a cosmetic issue that does not impact device communication or functionality. This certificate is used during enrollment only.

Removing the Expired Certificate message

The only way to remove the message is to re-enroll the device. When the new MDM profile installs it will not have an expired certificate.

Exact steps for re-enrollment will depend on the device type, if the MDM profile is removable or not, and enrollment methods open to the device.

  • iOS/iPadOS device eligible for Automated Device Enrollment:

    1. Ensure an Automated Device Enrollment profile is assigned to the device under Devices > Automated Device Enrollment in Jamf School.

    2. Send the Erase Device command from Jamf or manually erase the device.

    3. Go through the Setup Assistant again to re-enroll.

  • iOS/iPadOS or macOS device not eligible for Automated Device Enrollment:

    1. Either manually remove the MDM profile from the device or send the Unmanage command from Jamf School.

    2. Use on-device enrollment to re-enroll.

  • macOS device eligible for Automated Device Enrollment

    1. Ensure an Automated Device Enrollment profile is assigned to the device under Devices > Automated Device Enrollment in Jamf School.

    2. Send the Unmanage command from Jamf School.

    3. Enroll on the device again through Terminal with the command: sudo profiles renew -type enrollment. Follow the prompts to install the MDM Profile.

Did this answer your question?