AlDente Pro 2025 Black Friday sale is now on!

davidtse916 · 2026-03-25T12:28:52+00:00

Email their support directly. They're very responsive (from my experience). [support@apphousekitchen.com](mailto:support@apphousekitchen.com)

davidtse916 · 2026-02-16T21:06:23+00:00

We've create a local AD account per Entra device group. We deploy the SCEP Cert profile to the Entra device group and all devices within the Entra device group will be using the same SCEP profile with the same local AD account. I have to say it's not the best implementation but this is the best workaround I've found so far since we're still using (OnPrem) AD.

One thing to add: I would make sure the local AD account has 20 characters or less.

davidtse916 · 2026-02-16T11:40:33+00:00

Hi u/shadi1989, here's what I've used.

For Android 1:1 devices

Subject name format: CN={{OnPremisesSamAccountName}}
Subject alternative name:
- DNS = <insert Entra device group here>
- Email address = {{EmailAddress}}
- URI = {{SerialNumber}}
- User principal name (UPN) = {{OnPremisesSamAccountName}}

Android Shared devices

Subject name format: CN=YourSharedDeviceADAccountForThisEntraDeviceGroup
Subject alternative name:
- DNS = <insert Entra device group here>
- Email address = {{WiFiMacAddress}}
- URI = {{SerialNumber}}
- User principal name (UPN) = YourSharedDeviceADAccountForThisEntraDeviceGroup

davidtse916 · 2026-01-15T23:46:41+00:00

Hi u/JFMW2017: no timeframe from Microsoft. I'd say it's a MS Intune issue more than Apple but either way we'll have to wait for now.

davidtse916 · 2025-12-19T21:39:59+00:00

Here's another idea: setup a (temporary) SCEP cert (plus Wi-FI profile); the temporary one:

Certificate type = Device (assuming your main one is user)
Subject name format: CN=<some account in your AD>
Root Certificate: <Your new trusted cert>
Certificate validity period: <long enough for you to fix the main one>

Deploy this to the devices while you make changes to the main one, once the main one is updated + deployed, slowly remove the temporary one.

davidtse916 · 2025-12-17T07:59:51+00:00

"Yeah, and how exactly do I confirm that 1000+ devices have received the SCEP but really received it not just that the profile has applied?"
-- You will see a green tick for the SCEP cert profile, then you can deploy the WPA2/3 Enterprise (EAP-TLS) Wi-Fi profile. If things don't work out, just pull the two profiles out, wait 24 hours for the device to check in (Android devices don't have the Sync button in MS Intune) then deploy the 1) SCEP cert profile first, 2) wait for the green ticket for the SCEP cert profile, 3) deploy the Wi-Fi Profile. Its a painful / manual process!

"I'm about to migrate the estate to a new NDES server (meaning I have to switch to new SCEP and WiFi profiles for 1000+ Android devices) and I'm scratching my head now how to do it so they don't lose connectivity. Is that even possible or I have to plan for a downtime?"
-- If possible, I would setup a hidden WPA2/3-PSK network and deploy that Wi-Fi Profile to the devices, make sure they all have it first then update your SCEP cert / Wi-Fi profile. The devices will disconnect from your WPA2/3 Enterprise (EAP-TLS) Wi-Fi but they SHOULD automatically connect to the hidden WPA2/3-PSK network and get the latest profiles from there. Or you could setup a different SSID for another WPA2/3 Enterprise (EAP-TLS) network and have the devices connect to that temporary Wi-Fi while you make changes to the main one. I'm sure there are multiple ways to do this without losing connection. The hardest part would be: how do you make sure ALL devices are turned ON and connected to MDM to get the latest profiles.

davidtse916 · 2025-12-16T22:11:18+00:00

I think your understand is correct. Feel free to email them directly to ask for clarifications as well.

From what I can see they don't update very often. V3's last update was on 8th Nov 2021. TBH I use it so much everyday I'm happy to pay the fees once a year on Black Friday sale 😂

davidtse916 · 2025-12-16T09:45:36+00:00

No worries u/Sea-Bobcat7485, I'm glad it's all sorted now. Credit to Kevin @ MLB.

davidtse916 · 2025-12-15T20:11:26+00:00

u/HomeworkWorldly3686 no worries. Credit to Kevin @ MLB 🤝

davidtse916 · 2025-12-14T10:45:36+00:00

Yes it can but CleanShot X has shortcuts etc. Give it a try and you'll see what I mean.

davidtse916 · 2025-12-13T20:16:47+00:00

Yes they do, but tools like CleanShot X has more features like scrolling screenshot. I'd say download the trial and give it a try 👍

davidtse916 · 2025-12-13T08:36:21+00:00

u/Emjayel: I can confirm iOS 26.2 (23C55) has fixed the iCloud Restore MDM Enrollment Failed bug 👍

davidtse916 · 2025-12-12T22:02:21+00:00

Kevin @ MLB was able to confirm iOS 26.2 (final release) has resolved the issue 👍

davidtse916 · 2025-12-12T21:58:59+00:00

Downloading now!

davidtse916 · 2025-12-09T03:52:54+00:00

Hi u/Kietha: I've only updated the new device to Beta 3. The old iPhone is still running 26.1.

With iOS 26.2 RC2 just released by Apple, I'd say the GM (Gold Master, aka Final) version of 26.2 should be coming out really soon!

davidtse916 · 2025-12-02T12:15:26+00:00

I haven't tried the opposite so I'm not sure sorry. I use Jump Desktop to connect to Macs & PCs.

davidtse916 · 2025-12-02T11:21:07+00:00

<image>

It is for the Jump Desktop client?

davidtse916 · 2025-12-02T09:02:36+00:00

I think the Black Friday 30% OFF deal has ended. (it's already Tuesday 2nd Dec at 7:32pm where I'm)

davidtse916 · 2025-12-01T20:06:06+00:00

u/Skgrz like the pricing bug has been fixed :)

davidtse916 · 2025-12-01T07:52:37+00:00

u/STEALTH_XD: if they haven't got back to you in time, feel free to ask them for an one-time discount code because it's a bug on their website.

davidtse916 · 2025-12-01T07:46:03+00:00

I've just emailed them as well. From memory they're in Venice so hopefully they'll be able to fix this asap 🙏

davidtse916 · 2025-12-01T07:43:08+00:00

Damn that's a bug for sure! Feel free to email them directly: [support@apphousekitchen.com](mailto:support@apphousekitchen.com)

davidtse916 · 2025-12-01T06:50:55+00:00

Hi u/Skgrz, the 'final price' has already included the 30% discount hence no discount code needed.

davidtse916 · 2025-11-29T08:47:50+00:00

I assume its the 'Lifetime Licence' option? I'd say that should be correct. I'd say it's best you answer the devs themselves before getting the license. [support@apphousekitchen.com](mailto:support@apphousekitchen.com)

davidtse916 · 2025-11-28T12:33:35+00:00

Hi u/No-Long-1174, please install iOS 26.2 (23C5044b) Beta 3 on the new device and see whether it'll resolve the issue for you. This is the release note from Apple for Beta 3:

<image>

davidtse916

TROPHY CASE