Service Diagnostic tests

The Service Diagnostic screen (Services > Overview) in the Admin Portal provides a health check for several services. The diagnostic tests determine whether your Core instance can connect to these services. An error indicates that you cannot reach the service.

The services checked are:

Table 1. Service diagnostic tests descriptions

Service

Test

AFW

Checks to see if:

• Authentication server https://accounts.google.com/o/oauth2/token is reachable.
• API server https://www.googleapis.com/androidenterprise/v1/enterprises is reachable.

APNS

Checks to see if:

• MDM-APNS service is reachable.
• ENTERPRISE-APNS - No Enterprise APNS certificate configured.
• MDM-APNS - feedback service (tccentos122.auto.mobileiron.com:2196) is not reachable.

APPCONFIG_ COMMUNITY_REPO

Checks to see if the AppConfig Community Repository server is reachable:

https://d2e3kgnhdeg083.cloudfront.net/com.example.OneTouchConfiguration/current/appconfig.xml

APP_GATEWAY

Checks to see if App Gateway server is reachable:

https://gwtest.mobileiron.com/gateway/gatewayServices/status.html

BYPASS

Checks the connection between your Core instance and the Apple activation lock bypass server

CERTIFICATE ENROLLMENT

Checks to see if:

• Certificate Enrollment : System - iOS Enrollment SCEP is reachable.
• Certificate Enrollment : System - iOS Enterprise AppStore SCEP is reachable.
• Certificate Enrollment : System - Windows Phone Enrollment SCEP is reachable.

CONFIGURATIONS

Tests the connection to the Certificate Enrollment server from your Core instance.

CONNECTOR

Two tests are run:

• One test checks whether Enterprise Connector is enabled (Services > Connector)
• If Enterprise Connector is enabled, the other test sends an HTTP Post request from your Core instance to each Connector configured, checking whether the Connector can communicate with your Core instance

DEP

Sends a sample GET request to test the connection between your Core instance and the MDM server using Device Enrollment.

FCM

Checks whether Google Firebase Cloud Messaging (FCM) is reachable from your Core instance.

HEALTH_ATTESTATION_ SERVICE

Checks if the Health Attestation Service serveris reachable.

https://has.spserv.microsoft.com/HealthAttestation/ValidateHealthCertificate/v1

LDAP

Two tests are run:

• Checks LDAP from Core to verify the communication channel
• For each Connector configured, checks the communication channel for the path from the LDAP server to Core, then Core to Connector, and finally from Connector to the LDAP server

MAPQUEST

Checks if the MapQuest Service server is reachable:

https://api.mqcdn.com/sdk/mapquest-js/v1.0.0/mapquest.js

PROXY

No proxy is configured.

SENTRY

Checks the connection between your Core instance and the Sentry used (either integrated standalone). As part of this test, the connection between ActiveSync server and Sentry is checked also.

SENTRY_WITH_ ACTIVESYNC

No Integrated Sentry server(s) configured.

No Standalone Sentry server(s) configured.

SERVICES

Checks whether the IP addresses reserved for FCM are reachable.

VPP

Sends a GET request to verify the connection between Core and the Apple License server.

Running Service Diagnostic tests

To run the Service Diagnostic tests:

  1. Go to Services > Overview.
  2. To test one or all of the services:
    • Click Verify All to test the listed services
    • Click Verify next to a specific service to test that service