This is a .mobileconfig file generated by Apple's Configurator. This profile is supposed to send a SCEP request to a Microsoft CA NDES server. The NDES server should then issue a certificate to the requesting device. The problem with this XML file is that the Challenge isn't being recognized by iOS. The solution is to move lines 8 & 9 down to be…

Incorrect SCEP .mobileconfig

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
	<array>
		<dict>
			<key>Challenge</key>
			<string>This is where the challenge goes</string>
			<key>PayloadContent</key>
			<dict>
				<key>Key Type</key>
				<string>RSA</string>
				<key>Keysize</key>
				<integer>2048</integer>
				<key>Retries</key>
				<integer>3</integer>
				<key>RetryDelay</key>
				<integer>10</integer>
				<key>Subject</key>
				<array>
					<array>
						<array>
							<string>O</string>
							<string>Company Name</string>
						</array>
					</array>
					<array>
						<array>
							<string>CN</string>
							<string>Foo</string>
						</array>
					</array>
				</array>
				<key>URL</key>
				<string>http://scep.pretendco.com</string>
			</dict>
			<key>PayloadDescription</key>
			<string>Configures SCEP settings</string>
			<key>PayloadDisplayName</key>
			<string>SCEP</string>
			<key>PayloadIdentifier</key>
			<string>mac-pro.local.A4365399-A545-489F-BC75-40DFASF3044B62.com.apple.security.scep.A4365399-A545-489F-BC75-40DFASF3044B62</string>
			<key>PayloadType</key>
			<string>com.apple.security.scep</string>
			<key>PayloadUUID</key>
			<string>A4365399-A545-489F-BC75-40DFASF3044B62</string>
			<key>PayloadVersion</key>
			<real>1</real>
		</dict>
	</array>
	<key>PayloadDisplayName</key>
	<string>SCEP Enrollment Profile</string>
	<key>PayloadIdentifier</key>
	<string>mac-pro.local.A4365399-A545-489F-BC75-40DFASF3044B62</string>
	<key>PayloadRemovalDisallowed</key>
	<false/>
	<key>PayloadType</key>
	<string>Configuration</string>
	<key>PayloadUUID</key>
	<string>A4365399-A545-489F-BC75-40DFASF3044B62</string>
	<key>PayloadVersion</key>
	<integer>1</integer>
</dict>
</plist>