2444116 - Registration of iOS Devices to Afaria is not possible when SCEP is enabled

Unexpectedly no Apple devices can be enrolled in to Afaria when SCEP (Simple Enrollment Protocol) is enabled.
This does affect iOS devices regardless of their operating system version.

While enrolling an iOS device in to Afaria the following entries can be observed by the administrator of the landscape:

• In the CAPI event log:
  <Result value="800B0109">A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider. </Result>
  </CertGetCertificateChain>
• In the application log:
  <EventData Name="EVENT_MSCEP_INVALID_PASSWORD" />

• Afaria 7 SP17 and above
• iOS 9.x and above

Afaria; SCEP; iOS; Registry , KBA , MOB-AFA , Afaria , Problem