fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
https://fleetdm.com
Other
3.01k stars 418 forks source link

Improve error message on T_C_NOT_SIGNED #8431

Closed michalnicp closed 1 year ago

michalnicp commented 1 year ago

Goal

When there is a T_C_NOT_SIGNED error returned by Apple's device management servers ie when making MDM requests, we should print a more helpful error message that includes instructions on how to resolve it. Currently, we print an error like

POST /api/latest/fleet/mdm/apple/enrollmentprofiles received status 500 DEP auth error: 403 Forbidden: T_C_NOT_SIGNED: DEP auth error: 403 Forbidden: T_C_NOT_SIGNED

Consider linking to https://support.apple.com/en-us/HT203063

How?

noahtalerman commented 1 year ago

When there is a T_C_NOT_SIGNED error

@michalnicp why does this error happen?

roperzh commented 1 year ago

in a way, this is a duplicate of https://github.com/fleetdm/fleet/issues/8537, I believe we should close this issue in favor of 8537

fleet-release commented 1 year ago

In clouds, guidance, Error message now improved, Ease, knowledge bestowed.