This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(118.4, 6%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKN%3C/text%3E%3C/svg%3E)
I was trying to enroll Mac OS device using the Company Portal App. I have installed Company Portal app in MAC and trying to configure all the steps by following the document (https://learn.microsoft.com/en-us/mem/intune/user-help/enroll-your-device-in-intune-macos-cp). But I was not able to install Management Profile as it prompt a message "Could not obtain the final profile using the Encrypted Profile Service. The credentials within your profile may have expired. Try downloading a new profile".
Can any one from support team help me to troubleshoot this issue?
@Kandregula, Narayana Thanks for posting in our Q&A.
For the error message, it may occurs when we couldn't allow macOS. Please make sure we allow macOS in Devices > Enroll devices > Enrollment restrictions.
To avoid any other factors affecting enrollment, we appreciate your help to collect some information:
If there is anything update, feel free to let us know.
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
@Kandregula, Narayana I am currently standing by for further update from you and would like to know how things are going. If you have any questions or concerns on the recent information I've provided you, please don't hesitate to let me know.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(67.2, 5%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBC%3C/text%3E%3C/svg%3E)
These solutions aren't helpful because we can't access "Devices" without first enrolling a device, and this error message prevents us from enrolling a device.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(307.2, 89%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBP%3C/text%3E%3C/svg%3E)
This is an ongoing issue with Company Portal for mac. I have tried allowing SSO sign-in to company portal to register a device but the only "solution" I have found is to delete the "Management Profile" that is installed when the intune managed mac is set up and install the same one from Company Portal. This makes zero sense and should be as easy as it is for windows where the user just signs into company portal .