OS X Server: Installing profiles that require user interaction
When attempting to automatically push profiles that require user interaction to be installed to a device enrolled in Profile Manager, installation may not succeed.
Profiles that require user interaction to be installed cannot be installed via push. An example of such a profile is one where the payload contains a digital certificate requiring the end user to enter a passphrase in order to be installed. Since there is no way for the user to enter the passphrase during an automatic push, this type of profile must be installed manually.
To manually install, the user can either download it from the Profile Manager self service user portal, or you can email it to an enrolled device and the user can download it from within the email.