locked
Stuck on Windows Phone 8.1 MDM server enrollment RRS feed

  • Question

  • Hi,

    I'm another developer who cannot pass enrollment in my custom MDM server. The discovery is okey, but during enrollment my WP8.1 client says "We weren't able to set up this account [...]", and the phone don't send request to given application addr.

    I checked every thread about MDM enrollment on this forum, but still cannot find any bug in my code.

    My soap:

    <?xml version="1.0" ?>
    <s:Envelope xmlns:a="http://www.w3.org/2005/08/addressing" xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
      <s:Header>
        <Action s:mustUnderstand="1">http://schemas.microsoft.com/windows/pki/2009/01/enrollment/RSTRC/wstep</Action>
        <a:RelatesTo>urn:uuid:0d5a1441-5891-453b-becf-a2e5f6ea3749</a:RelatesTo>
        <o:Security s:mustUnderstand="1" xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
          <u:Timestamp u:Id="_0">
            <u:Created>2014-07-29T16:19:14.701062</u:Created>
            <u:Expires>2014-07-29T16:24:14.701091</u:Expires>
          </u:Timestamp>
        </o:Security>
      </s:Header>
      <s:Body>
        <RequestSecurityTokenResponseCollection xmlns="http://docs.oasis-open.org/ws-sx/ws-trust/200512">
          <RequestSecurityTokenResponse>
            <TokenType>http://schemas.microsoft.com/5.0.0.0/ConfigurationManager/Enrollment/DeviceEnrollmentToken</TokenType>
            <RequestedSecurityToken>
              <BinarySecurityToken EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd#base64binary" ValueType="http://schemas.microsoft.com/5.0.0.0/ConfigurationManager/Enrollment/DeviceEnrollmentProvisionDoc" xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">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</BinarySecurityToken>
            </RequestedSecurityToken>
            <RequestID xmlns="http://schemas.microsoft.com/windows/pki/2009/01/enrollment">0</RequestID>
          </RequestSecurityTokenResponse>
        </RequestSecurityTokenResponseCollection>
      </s:Body>
    </s:Envelope>

    My wap-provisioningdoc:

    <wap-provisioningdoc version="1.1">
      <characteristic type="CertificateStore">
        <characteristic type="Root">
          <characteristic type="System">
            <characteristic type="37F589B2BBD948A9DEFEE26766CE3D0F">
              <parm name="EncodedCertificate" value="MIIClTCCAX2gAwIBAAIBADANBgkqhkiG9w0BAQUFADAAMB4XDTE0MDcyOTE0MTkxNFoXDTE0MDczMDE0MTkxNFowHDEaMBgGA1UEAxMRQ2xpZW50Q2VydFN1YmplY3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FHCZH4StYdMyT/cpISFScXCGyjQoiDSt4XJPa/9XepSoWEetNe+PEnOWBWVtMtEZs5Qwnwr4szIceF+WQftew6mXQ3u03CIKCQO4VHoYyk6GIZ/dgoC9M1qcrWs17V6Aiyyap79OxErxFLWLouskY83oqv5SESg+E8aSzdQJF+SzD4pTs3jkUq6MNmntm0kpKH+UxhB726tFKGXxod8pKFgZcCyr5XKnn6SVKoiMnL9PBqGFAXOf70YHJUpG2j0ZOU5jvk5W/8jGdcSoS8om5X7l+XjlsmqpDeKumBkA0wI+7ZcZ4QIT0PH5mO9W1cepKXbIZ9d5BUNs9tQm/WN7AgMBAAEwDQYJKoZIhvcNAQEFBQADggEBABMz2uMcZJmhNEaEHHXyK/l9KoYvb1ghVUwvTGkemdQhicZTIJwKsEfx0vX8XAR8D6YUesW/UbO6QSpjcOpJBePkP64FxHU/V8X61WYC+1ytSSlru1KNI4x7ccBsLyb5mBLW+gyJcBfuv+WTjk8lDlHJjylWaoAHyVtmhqktDMossHgjjrrU9vcp5PgU5gJ6N2PCW002I6+zdJ60FQWfB8FrWClb9utktEhWeqtCmIFKhWwoxXs3GTG6aoxeHkGh0AkmZD9zeV2WGGCPyFNsIzbvJCPyY9OYCy7nbvUvrFHMEMopStkHpoSP3l7f3+0VW4WhQeszNce9bESJ8GHLD8k="/>
            </characteristic>
          </characteristic>
        </characteristic>
        <characteristic type="My">
          <characteristic type="User">
            <characteristic type="6848669F2C26033211ED2B43CFF01EFE">
              <parm name="EncodedCertificate" value="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"/>
            </characteristic>
            <characteristic type="PrivateKeyContainer">
              <parm name="KeySpec" value="2"/>
              <parm name="ContainerName" value="ConfigMgrEnrollment"/>
              <parm name="ProviderType" value="1"/>
            </characteristic>
          </characteristic>
          <characteristic type="WSTEP">
            <characteristic type="Renew">
              <parm datatype="boolean" name="ROBOSupport" value="true"/>
              <parm datatype="integer" name="RenewPeriod" value="60"/>
              <parm datatype="integer" name="RenewRetryInterval" value="4"/>
            </characteristic>
          </characteristic>
        </characteristic>
      </characteristic>
      <characteristic type="APPLICATION">
        <parm name="APPID" value="w7"/>
        <parm name="PROVIDER-ID" value="TestMDMServer"/>
        <parm name="NAME" value="MyServer"/>
        <parm name="ADDR" value="https://dev-mdm.DUMMY.com/addr.ashx"/>
        <parm name="CONNRETRYFREQ" value="6"/>
        <parm name="CRLCheck" value="0"/>
        <parm name="INITIALBACKOFFTIME" value="30000"/>
        <parm name="MAXBACKOFFTIME" value="120000"/>
        <parm name="BACKCOMPATRETRYDISABLED"/>
        <parm name="DEFAULTENCODING" value="application/vnd.syncml.dm+wbxml"/>
        <parm name="SSLCLIENTCERTSEARCHCRITERIA" value="Subject=%ClientCertSubject%&amp;amp;Stores=MY%5CUser"/>
        <characteristic type="APPAUTH">
          <parm name="AAUTHLEVEL" value="CLIENT"/>
          <parm name="AAUTHTYPE" value="DIGEST"/>
          <parm name="AAUTHSECRET" value="password1"/>
          <parm name="AAUTHDATA" value="B64encodedBinaryNonceInsertedHere"/>
        </characteristic>
        <characteristic type="APPAUTH">
          <parm name="AAUTHLEVEL" value="APPSRV"/>
          <parm name="AAUTHTYPE" value="BASIC"/>
          <parm name="AAUTHNAME" value="testclient"/>
          <parm name="AAUTHSECRET" value="password2"/>
        </characteristic>
      </characteristic>
      <characteristic type="DMClient">
        <characteristic type="Provider">
          <characteristic type="TestMDMServer">
            <characteristic type="Poll">
              <parm datatype="integer" name="NumberOfFirstRetries" value="8"/>
              <parm datatype="integer" name="IntervalForFirstSetOfRetries" value="15"/>
              <parm datatype="integer" name="NumberOfSecondRetries" value="5"/>
              <parm datatype="integer" name="IntervalForSecondSetOfRetries" value="3"/>
              <parm datatype="integer" name="NumberOfRemainingScheduledRetries" value="0"/>
              <parm datatype="integer" name="IntervalForRemainingScheduledRetries" value="1560"/>
            </characteristic>
            <parm datatype="string" name="EntDeviceName" value="Administrator_WindowsPhone"/>
          </characteristic>
        </characteristic>
      </characteristic>
    </wap-provisioningdoc>

    Tuesday, July 29, 2014 11:17 AM

Answers

  • The answer was wrong SSLCLIENTCERTSEARCHCRITERIA. Topic can be closed.
    • Marked as answer by Eric Fleck Tuesday, January 27, 2015 3:24 PM
    Tuesday, August 5, 2014 10:38 AM