Android enrollment: "Invalid attribute iat / Issued at time is not valid"
Last updated: June 24, 2026
Quick answer
The device clock is wrong or not set to automatic.
- Set date & time to automatic, confirm it's current, re-enroll
- Root cause even when reinstalling doesn't help
Symptoms
- Invalid attribute iat
- Issued at time is not valid
- Android enrollment clock
Solution
The device clock is wrong or not set to automatic. The enrollment token's iat (issued-at) claim fails validation. Set Settings → Date & Time → Set Automatically, confirm the time is current, and re-enroll. This is the root cause even when reinstalling apps does not help.