title: iPhone Configuration Utility does not install MDM Configuration profile
body: <p>The setup:
  iPhone Configuration Utility for Windows, version 3.5.0.289
  iPhone (3G?) Software version 4.3.5 (8L1)</p>
  
  <p>Default MDM configuration. The MDM service is using Apple's Ruby reference implementation if it matters.</p>
  
  <p>When trying to install a profile using IPCU, configured in iPCU, which IPCU considers valid, I get the following error:</p>
  
  <pre><code>Oct  4 15:39:46 Developments-iPhone profiled[644] &lt;Warning&gt;: MC|Profile cannot be queued for installation. Error: NSError 0x1f5510d0:
  Desc   : Invalid Profile
  Sugg   : The MDM payload com.example.mdmtest.mdm1 contains invalid access rights.
  US Desc: Invalid Profile
  US Sugg: The MDM payload com.example.mdmtest.mdm1 contains invalid access rights.
  Domain : MCInstallationErrorDomain
  Code   : 4000
  Type   : MCFatalError
  ...Underlying error:
  NSError 0x1f550960:
  Desc   : The profile MDMTest is invalid.
  Sugg   : The MDM payload com.example.mdmtest.mdm1 contains invalid access rights.
  US Desc: The profile MDMTest is invalid.
  US Sugg: The MDM payload com.example.mdmtest.mdm1 contains invalid access rights.
  Domain : MCProfileErrorDomain
  Code   : 1000
  Type   : MCFatalError
  Params : (
  MDMTest
  )
  ...Underlying error:
  NSError 0x1f54f940:
  Desc   : The payload MDMTest is invalid.
  Sugg   : The MDM payload com.example.mdmtest.mdm1 contains invalid access rights.
  US Desc: The payload MDMTest is invalid.
  US Sugg: The MDM payload com.example.mdmtest.mdm1 contains invalid access rights.
  Domain : MCPayloadErrorDomain
  Code   : 2000
  Type   : MCFatalError
  Params : (
  MDMTest
  )
  ...Underlying error:
  NSError 0x1f54f9b0:
  Desc   : The MDM payload com.example.mdmtest.mdm1 contains invalid access rights.
  US Desc: The MDM payload com.example.mdmtest.mdm1 contains invalid access rights.
  Domain : MCMDMErrorDomain
  Code   : 12000
  Type   : MCFatalError
  Params : (
  "com.example.mdmtest.mdm1"
  )
  Extra info:
  {
  isPrimary = 1;
  }
  </code></pre>
  
  <p>My question is this: What is "isPrimary = 1", where does it come from, and how do I get rid of it? I've tried exporting the configuration, but that doesn't contain any "isPrimary = 1" element and the access rights field is a magic number, presumably a bitmask, which I haven't been able to locate any documentation for, so is there any process, other than randomly trying numbers, by which one could get the iPhone to accept this profile?</p>