Occasionally things won’t work the way you expect, and you’ll have to troubleshoot the situation. Even a robust service like Profile Manager can have an occasional issue.
The profilemanager.log is located at /Library/Server/ProfileManager/Logs and can be viewed with Console by double clicking. Errors may be reported and listed in the logs.
If a device is not behaving as expected, look at the list of installed profiles on the device and see if the proper profiles have been installed. The solution may be as simple as applying the expected profile to the device.
If you’re having problems installing a profile, you may have improper certificates. Review your SSL certificates for validity and make sure the trust profile has been installed on the device.
Problems Enrolling a Device
A trust profile must be installed prior to enrolling a device, unless you are using a certificate signed by a trusted certificate authority.