Subject: Android Enrollment Fails with "Trust anchor for certification path not found"

Question

Hello,

I'm having an issue enrolling Android devices in Headwind MDM.

The server is accessible via browser, and the configuration URL works correctly:

https://headwind.unirios.com.br:9444/rest/public/sync/configuration/MNS04

However, the Headwind Android app always returns:

Trust anchor for certification path not found

The certificate appears to be valid in browsers, but OpenSSL reports an issue validating the certificate chain. The certificate is issued by Let's Encrypt YR1.

Is Headwind MDM fully compatible with the new Let's Encrypt YR1 certificate chain, or are there any additional SSL/certificate requirements for Android enrollment?

Thank you.

Answer 1

It's most likely one of two things: either the device is old, or the certificate chain is incomplete.

More details here:

https://qa.h-mdm.com/7394/cannot-enroll-device-https-trust-anchor-certification-found

https://qa.h-mdm.com/18231/letsencrypt-gives-https-error-trust-anchor-not-found-android