Profile installation failed on attempt to install profile on iOS with 403 error

[gkwurst]

Fleet version**: 4.63.0

Web browser and operating system**: Chrome Version 133.0.6943.99on Windows

---

💥  Actual behavior
Did a fesh install of Fleet on Ubunutu using the guide here:

https://fleetdm.com/guides/deploy-fleet-on-ubuntu-with-elastic#install-configure-fleet

Got it installed and MDM enabled for Apple devices. Created link for Apple hosts and attempted to install on iPad. Downloads profile correctly but when installing gets a 403 error. Also get "The authenticity of "[company name] enrollment" cannot be verified", but that may be normal.

https://photos.app.goo.gl/TFGdxferzvJvsV6J9

Main fleet config changes as follows:
mysql: address: 127.0.0.1:3306 database: fleet username: ***** password: ***** redis: address: 127.0.0.1:6379 server: address: 0.0.0.0:4443 private_key: ****************************************** cert: /etc/letsencrypt/live/*********************/fullchain.pem key: /etc/letsencrypt/live/********************/privkey.pem websockets_allow_unsafe_origin: true osquery: status_log_plugin: filesystem status_log_file: /var/log/osquery/status.log

🕯️ More info

May not be related but don't seem to see any log files from osquery. Nothing at /tmp/osquery_result or when manually changed in config file to /var/log/osquery/status.log.

[PezHub]

Hi @gkwurst, are you using a DNS name or IP address for your Fleet Server URL? If IP address that could explain the issue. More info here #23720

[gkwurst]

Hi @gkwurst, are you using a DNS name or IP address for your Fleet Server URL? If IP address that could explain the issue. More info here #23720

Dns I'm afraid. Internally elastic search and such uses localhost or 0.0.0.0, but nginx and fleet are using dns.