DEP enrolment failing with "NSURLErrorDomain error -1012"


#1

Issue:
DEP enrolment into XenMobile failing with the following error

NSURLErrorDomain error -1012

Explanation:
This issue is caused by trust issues between the device and the MDM server.
Issue is with the Root CA pushed by the XenMobile, it may not have the full certificate chain presented.

Error code explanation:
Error code NSURLErrorUserCancelledAuthentication = -1012

Solution:
Make sure you include the intermediate certificates in your SSL listener certificate on the XenMobile server.

Alternatively you can turn off installation of root CA via a server propertie.

Note you will need to restart the XenMobile nodes after either updating the SSL listener certificate or changing server properties.

Citrix article https://support.citrix.com/article/CTX200476