---
title: Service Diagnostic tests
slug: device-management-apple/service-diagnostic-tests
createdAt: 2026-10-06T07:47:38.385Z
---
The Service Diagnostic screen (Services > Overview) in the Admin Portal provides a health check for several services. The diagnostic tests determine whether your Ivanti EPMM instance can connect to these services. An error indicates that you cannot reach the service.
The services checked are:
Table: Service diagnostic tests descriptions
| Service | Test |
| ----------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| AFW | Checks to see if:
- [Authentication server](https://accounts.google.com/o/oauth2/token) is reachable.
- [API server](https://www.googleapis.com/androidenterprise/v1/enterprises) is reachable. |
| APNS | Checks to see if:
- MDM-APNS service is reachable.
- ENTERPRISE-APNS - No Enterprise APNS certificate configured.
- MDM-APNS - feedback service (tccentos122.auto.ivanti.com:2196) is not reachable. |
| APPCONFIG\_ COMMUNITY\_REPO | Checks to see if the [AppConfig Community Repository server](https://d2e3kgnhdeg083.cloudfront.net/com.example.OneTouchConfiguration/current/appconfig.xml) is reachable. |
| APP\_GATEWAY | Checks to see if [App Gateway server](https://gwtest.mobileiron.com/gateway/gatewayServices/status.html) is reachable. |
| BYPASS | Checks the connection between your Ivanti EPMM instance and the Apple activation lock bypass server |
| CERTIFICATE ENROLLMENT | Checks to see if:
- Certificate Enrollment : System - iOS Enrollment SCEP is reachable.
- Certificate Enrollment : System - iOS Enterprise AppStore SCEP is reachable.
- Certificate Enrollment : System - Windows Phone Enrollment SCEP is reachable. |
| CONFIGURATIONS | Tests the connection to the Certificate Enrollment server from your Ivanti EPMM instance. |
| CONNECTOR | Two tests are run:
- One test checks whether Enterprise Connector is enabled (Services > Connector)
- If Enterprise Connector is enabled, the other test sends an HTTP Post request from your Ivanti EPMM instance to each Connector configured, checking whether the Connector can communicate with your Ivanti EPMM instance |
| DEP | Sends a sample GET request to test the connection between your Ivanti EPMM instance and the MDM server using Device Enrollment. |
| FCM | Checks whether Google Firebase Cloud Messaging (FCM) is reachable from your Ivanti EPMM instance. |
| HEALTH\_ATTESTATION\_ SERVICE | Checks if the [Health Attestation Service server](https://has.spserv.microsoft.com/HealthAttestation/ValidateHealthCertificate/v1) is reachable. |
| LDAP | Two tests are run:
- Checks LDAP from Ivanti EPMM to verify the communication channel
- For each Connector configured, checks the communication channel for the path from the LDAP server to Ivanti EPMM, then Ivanti EPMM to Connector, and finally from Connector to the LDAP server |
| GOOGLE\_MAPS | Checks if the [Google Maps](https://maps.googleapis.com/maps/api/js) is reachable. |
| PROXY | No proxy is configured. |
| SENTRY | Checks the connection between your Ivanti EPMM instance and the Standalone Sentry. As part of this test, the connection between ActiveSync server and Sentry is checked also. |
| SENTRY\_WITH\_ ACTIVESYNC | No Standalone Sentry server(s) configured. |
| SERVICES | Checks whether the IP addresses reserved for FCM are reachable. |
| VPP | Sends a GET request to verify the connection between Ivanti EPMM and the Apple License server. |
## Running Service Diagnostic tests
**Procedure **
1. Go to Services > Overview.
2. To test one or all of the services:
- Select Verify All to test the listed services
- Select Verify next to a specific service to test that service