XenMobile Server administrators may notice that newly added Apple devices, which are registered via Apple Deployment Programs (formerly DEP) , do not appear on XenMobile Server. Previously enrolled devices are not affected.

Apple DEP connectivity test initiated from the XenMobile server may also fail. This can be found under XenMobile Server > Settings > Apple Device Enrollment Program (DEP) > Select the DEP account name > "Test Connectivity".

Within the Debug log file on XenMobile Server, HTTP 500 error code are recorded for the connection attempt. This error can be found alongside a Java exception error.

To workaround this problem immediately, a proxy server can be configured for XenMobile Server.

An update is due to be released for currently supported XenMobile Server versions so that a proxy connection is no longer required.

- XenMobile Server 10.11 - Rolling Patch 3-https://support.citrix.com/article/CTX268133

- XenMobile Server 10.10 - Rolling Patch 5-https://support.citrix.com/article/CTX268947
 

Problem Cause

Apple have changed the way in which HTTPS connections to certain URLs are handled.

Connections made to these websites now require that the HTTPS Server Name Indication (SNI) extension be used.

XenMobile Server does not include a Server Name Extension for these connections yet without the use of a proxy.