Issue:
DEP enrolment into XenMobile failing with the following error
NSURLErrorDomain error -1012
Explanation:
This issue is caused by trust issues between the device and the MDM server.
Issue is with the Root CA pushed by the XenMobile, it may not have the full certificate chain presented.
Error code explanation:
Error code NSURLErrorUserCancelledAuthentication = -1012
Solution:
Make sure you include the intermediate certificates in your SSL listener certificate on the XenMobile server.
Alternatively you can turn off installation of root CA via a server propertie.
Note you will need to restart the XenMobile nodes after either updating the SSL listener certificate or changing server properties.
Citrix article https://support.citrix.com/article/CTX200476