XenMobile iOS enrollment getting error "Profile Installation Failed A network error has occurred"



iOS console logs show:

Xens-iPhone profiled[148] <Notice>: (Error) MC: URL request to https://mdmxms.domain.net:8443/zdm/scep/sp-078435ec-0aed-4ba0-bb3d-be665934be12?operation=GetCACert&message=APPLE_PROFILE failed. Error: Error Domain=NSURLErrorDomain Code=-1003 "A server with the specified hostname could not be found." UserInfo={NSUnderlyingError=0x125687710 {Error Domain=kCFErrorDomainCFNetwork Code=-1003 "A server with the specified hostname could not be found." UserInfo={NSErrorFailingURLStringKey=https://mdmxms.domain.net:8443/zdm/scep/sp-078435ec-0aed-4ba0-bb3d-be665934be12?operation=GetCACert&message=APPLE_PROFILE, NSErrorFailingURLKey=https://mdmxms.domain.net:8443/zdm/scep/sp-078435ec-0aed-4ba0-bb3d-be665934be12?operation=GetCACert&message=APPLE_PROFILE, _kCFStreamErrorCodeKey=8, _kCFStreamErrorDomainKey=12, NSLocalizedDescription=A server with the specified hostname could not be found.}}, NSErrorFailingURLStringKey=https://mdmxms.domain.net:8443/zdm/scep/sp-078435ec-0aed-4ba0-bb3d-be665934be12?operation=GetCACert&message=APPLE_PROFILE, NSErrorFailingURLKey=https://mdmxms.domain.net:8443/zdm/scep/sp-078435ec-0aed-4ba0-bb3d-be665934be12?operation=GetCACert&message=APPLE_PROFILE, _kCFStreamErrorDomainKey=12, _kCFStreamErrorCodeKey=8, NSLocalizedDescription=A server with the specified hostname could not be found.}

Create a DNS record that will resolve the XMS Virtual Machine FQDN to the MDM LB VIP just like the alternative enrollment FQDN already resolves DNS and routes (NAT) correctly.

---

Problem Cause

Enrollment FQDN is not the same as the XMS FQDN used
XenMobile Server virtual machine Fully Qualified Domain Name (FQDN) does not resolve DNS record to the MDM Load Balanced Virtual IP (VIP)
XMS FQDN must always resolve DNS and route (NAT) correctly to the MDM LB VIP regardless of whether or not alternative enrollment FQDNs are being used, which also must route correctly to MDM LB VIP if they are being used.
Enrollment FQDN may differ from XMS FQDN as long as a UC SAN or wildcard certificate is used as the XenMobile SSL Listener certificate.

XenMobile iOS enrollment getting error "Profile Installation Failed A network error has occurred"