MDM Profile on iOS 15/iPadOS 15 and macOS 12 devices shows as “Not Verified” or “Unverified” – On-Prem
Article ID: CTX329958
Updated On:
Description
Current enrolled devices that were upgraded from iOS 14/iPadOS 14 or earlier to iOS/iPadOS 15 or newly enrolled devices on iOS/iPadOS 15 may show “Not Verified” under the device “Settings > General > VPN & device Management > Citrix Workspace MDM Profile” 
Current enrolled devices that were upgraded from macOS 11 or earlier to macOS 12 or newly enrolled devices on macOS 12 may show “Not Verified” under the “macOS System Preferences > Profile > Citrix Workspace MDM Profile” 
Resolution
Update to on-prem 10.14 RP1. Please note, there is no change to functionality or security with this change.
Once you update to on-prem 10.14 RP1, end-users can maintain the “Verified” display of their enrollment profile by re-enrolling either prior to the new iOS/iPadOS or macOS versions, or after upgrading to iOS 15/iPadOS 15 or macOS 12, through which the user will receive a new enrollment profile signed with Citrix’s public CA.
Citrix has made changes to support to iOS 15/iPadOS 15 or macOS 12, such that new MDM enrollment profiles are signed with Citrix’s public CA and will display as “Verified”, any prior enrollments signed with Citrix’s private CA showing as “Verified” on iOS 14/iPadOS 14 or macOS 11 or earlier, will show as “Not Verified” or “Unverified” once the device is updated to iOS 15/iPadOS 15 or macOS 12 is updated.
What if I do not Update to 10.14 RP1?
The enrollment profile of existing and newly enrolled users will display “Unverified” or “Not-Verified”. There is no change to functionality or security with this change.
Problem Cause
Apple has made changes to the verification of MDM enrollment profiles, whereby starting in iOS 15/iPadOS 15 and macOS 12, only profiles signed with public CAs are displayed as “Verified”. Private CAs, such as those used by Citrix, will now display as “Not Verified” or “Unverifed” in iOS 15/iPads 15 and macOS 12.