I have an Xserve running 10.7.2 Server fully patched today.
We have a valid SSL from GoDaddy installed. Lion's firewall is off, hardware firewall is not blocking any traffic.
From an iPad I can access the profile manager through the webpage https://mydomain.com/profilemanager and log in successfully. I can install the Trust Profile successfully.
When I try enroll the device it gives me this error:
The server certificate for "https://mydomain.com/devicemanagement/api/device/ota_service" is invalid