After upgrading to iOS 9.2 managed apps are failing to install. We are seeing the following error message in the device logs:
12/9/15, 1:53:07 PM mdmd[661]: (Note ) MDM: App “[app.bundle.name]” state changed from Prompting to Failed.
Anyone else seeing the same issue?
I have tested on both supervised and non-supervised devices. And while I personally cannot re-produce it, airwatch is stating in their known issues community forum that it is a problem.
Based on what most people are stating I would say this is an OS bug. Has anyone opened a bug report?
Don't think Apple has corrected this, still an issue with MobileIron managed devices today.
I made some test yesterday, 14 december using 2 iphone 6s Plus (iOS 9.1 and iOS 9.2) and 1 iphone 5 (iOS 5).
I've not been able to reproduce the issue on iphone 6s plus (both 9.1 and 9.2 iOS version) but the issue exists on the iPhone 5 (iOS 9.1).
I think that Apple is trying to fix the issue at a server level but apparently theyu are introducing new issues.....
My MDM Platform is AirWatch version 8.1.5
exactly, last friday we experienced no problems, as of yesterday it didn't work any more. A soon as an enterprise app is being removed no new enterprise apps can be installed any more.
cheers
emiel
We are on MobileIron Core 7.5.3.0 - Not seeing the issue as of now. I have noticed the "Force Device Checkin" is not working but when you drill down to device details it says the client checked in. So the record in the table doesn't appear to force update for Device Checkin..
I think its working on its own though. I updated to 9.2 last week. My device shows it checked in 10hours ago.
I do see 9.2 devices checking in so I am trying to determine if we are with any issues. Does not appear so ...
Has Apple offically identified this as a bug?
In MobileIron, the 'Client check-in' is the MobileIron App and the 'Last check-in' is the Apple MDM check-in. The Apple MDM check-in is not working all the time correctly since iOS 9.2 and managed apps cannot be installed.
Apple is in co-operation with MDM vendors (and also with MobileIron) and is currently working on a solution for this.
Regards
Patrick
Airwatch is saying that they believe it is fixed on the 8.1+ consoles:
"Based on internal testing, this issue appears to be largely mitigated in environments currently on AIrWatch 8.1+ due to improvements to our app management workflow, but is experienced more frequently in earlier versions of the AirWatch Console."
Yeah - today I got new feedback - it works but too worse and slowly - device not always contact MDM server.
So, the problem is not yet completely resolved.
New details: It works on iphone 6s but doesn't works on iphone 5 and ipads.
UPD: It works on iphone 5s.
UPD#2: mdmd process crashes on InstallApplication or ManagedApplicationList commands.
Apple just released 9.2.1 beta which includes fix for this issue:
Fixes a problem in iOS 9.2 that could prevent managed app installation. In iOS 9.2, if a Mobile Device Management (MDM) server sends an InstallApplication command to device, and then sends a ManagedApplicationList command before the app installation is finished, the app installation will not complete
Glad 9.2.1 is coming out so quickly.
While you're waiting, you can fix this with on prem Airwatch pretty easily:
delete from [deviceCommandQueue].[DeviceQueue] WHERE StatusID = 2 AND CommandID = 23I have confirmed that 9.2.1 does correct the issue. I have installed the beta on my iPad - once the update completed the device was checking in with no issues and managed apps installed with no problem. We are using MobileIron as our MDM.
Thanks
MDM vendor Citrix version XenMobile MDM 9.0
After upating device to 9.2.1 check-in still didn't pull software inventory correctly and re-push a managed application that had been uninstalled. After reenroll the policies pushed as expected. I removed app again to see if policy check-in worked as expected and repush the app. The initial re-push failed stating error: "Error MCMDMErrorDomain-12026: The app XXXXXXXX is already scheduled for management. (The app XXXXXXX is already scheduled for management." Once I opend the WorX Home agent on iPhone and refresh policy the app installation started. I hope the final release addresses the issue or there may need to be a patch released by the MDM vendors to permanently resolve the problem.
Any idea on the ETA for the formal release of 9.2.1, since Apple stopped signing for 9.1 the critically of this fix to MDM system has become even more heighten
Where are you suggesting this change should be made? And what version on-prem did you test this in?
For those on the XenMobile platform, Citrix issued a note on December 21st that XenMobile Server 10.3 was available for download (for those with an on-premise environment).
"As mentioned in the last communication, XenMobile Server 10.3 provides a solution to an issue with iOS 9.2 MDM APIs and the inability to push applications. Updating your XenMobile server to the latest version 10.3 will fix this issue by executing a command that allows the iOS MDM to restart and begin pushing apps to the device as before iOS 9.2."
Today Citrix sent out a second communication for those on XenMobile 9 Device Manager and it indicates that Patch_900_9924 is available for download as well. Definitely take a moment to look at the pre-requisites as it does require a couple of patch roll-ups to be installed in advance on both Device Manager and the App Controller. Also take note that there is the caveat that some devices still might require a re-enroll anyways...
"We are pleased to announce that XenMobile 9 Device Manager Server Patch (Patch_900_9924)for iOS 9.2 is now available for download.
The XenMobile 9 Device Manager patch provides a solution to an issue with iOS 9.2 MDM APIs and the inability to push applications. Updating XenMobile Device Manager with this latest patch will fix this issue by executing a command that allows the iOS MDM to restart and begin pushing apps to the device as before iOS 9.2.
The Citrix solution will continue to co-exist even after Apple provides a permanent fix in iOS 9.2.1. That is, after Apple releases a permanent fix to the public, the Citrix solution will check for the Apple fix in clients that have installed iOS 9.2.1, and if present, it will go dormant and not execute thereby allowing the Apple fix to be primary.
Since the standalone patch will be independent of all prior roll up patches for the Device Manager server, you can safely apply it to your XenMobile 9 platform to fix the Apple iOS 9.2 issue.
Any device types or operating systems that do not recognize the workaround provided with the Device Manager patch will still be required to re-enroll until the forthcoming release of iOS 9.2.1."
We are still on XenMobile 9 and are in the process of determining an upgrade path. We might wait until iOS 9.2.1 is released and then perform the update.
Have you been successfull in applying the patch (Patch_900_9924) on your XDM 9.0 servers?
Same here. Also using Citrix XenMobile 10.
Don't forget about your enterprise customers Apple. We are still waiting on the release of 9.2.1 to address this issue.
We went through CM and deployed this on the weekend. Pretty straightforward to implement and it does appear to resolve the issue for some iOS devices. But, as Citrix warned, your mileage may vary and some devices still may require the iOS 9.2.1 update. We've only tested it on a handful of devices so time will tell.
Has there been any mention of when 9.2.1 will be released? I wish Apple would start being a bit more open towards their Enterprise customers.
Apple, are you listening to this at all? You're KILLING us over here in our school. 9.2 has been out over a month now, and now you're looking about 9.3. Our deployment has had some serious setbacks because of 9.2. Please release this simple minor update soon!
The worst part about this is that they stopped signing 9.1. I have a pile of devices that either users upgraded to 9.2 or they were disabled and are now useless until 9.2.1 is released.
Even after more than 6 weeks of knowing this problem there is no fix from Apple. Well, I must say I'm more than disappointed. Apple and Enterprise? Not this way! Sorry.