Geek asks and answers

How to create an MDM registration profile for iOS

I am trying to create a simple MDM server for managing iOS devices. But I am struggling with the "MDM registration profile", I create this profile using ipcu. But when I open this profile via email (or web link), nothing happens.

Let me share what I do to create an "MDM Registration Profile" - Creating a new profile in ipcu. - Filling in the information for the "General" section - Filling in the information for "Managing mobile devices" - Filling in the information for "Credentials", since the above step is required - Then I export using the export button. The choice for safety.

Then I email the resulting file and open it on the device, but nothing happens when I open the file without asking me to open / install the file. (I also tried to create a web link, but no luck).

What am I doing wrong? Is there any documentation for creating an "MDM registration profile". Please help.

Update 1 -

I tried to open the mobileconfig file and see what causes the problems. After a lot of trial and error, I found that if I delete this dictionary, create a file that it will start working -

<dict>
        <key>AccessRights</key>
        <integer>8191</integer>
        <key>CheckInURL</key>
        <string>https://server-domain/workplace3/logiphone/</string>
        <key>CheckOutWhenRemoved</key>
        <false/>
        <key>PayloadDescription</key>
        <string>Configures Mobile Device Management</string>
        <key>PayloadDisplayName</key>
        <string>Mobile Device Management</string>
        <key>PayloadIdentifier</key>
        <string>com.server-domain.profile.mdm-one.</string>
        <key>PayloadOrganization</key>
        <string></string>
        <key>PayloadType</key>
        <string>com.apple.mdm</string>
        <key>PayloadUUID</key>
        <string>CC7E12CB-DA53-4D4E-AB7D-39B45A453146</string>
        <key>PayloadVersion</key>
        <integer>1</integer>
        <key>ServerURL</key>
        <string>https://server-domain/</string>
        <key>SignMessage</key>
        <false/>
        <key>Topic</key>
        <string>push_topic</string>
    </dict>

Any idea what is wrong in the dictionary above?

+3
source share
1 answer

IdentityCertificateUUID .
MDM. Identity, MDM. (PKCS12 SCEP) UUID, PayloadUUID , MDM

    <dict>
        <key>AccessRights</key>
        <integer>8191</integer>
        <key>IdentityCertificateUUID</key>
        <string>YOUR-ID_CERTIFICATE-PAYLOADUUID</string>
        <key>CheckInURL</key>
        <string>https://server-domain/workplace3/logiphone/</string>
        <key>CheckOutWhenRemoved</key>
        <false/>
        <key>PayloadDescription</key>
        <string>Configures Mobile Device Management</string>
        <key>PayloadDisplayName</key>
        <string>Mobile Device Management</string>
        <key>PayloadIdentifier</key>
        <string>com.server-domain.profile.mdm-one.</string>
        <key>PayloadOrganization</key>
        <string></string>
        <key>PayloadType</key>
        <string>com.apple.mdm</string>
        <key>PayloadUUID</key>
        <string>CC7E12CB-DA53-4D4E-AB7D-39B45A453146</string>
        <key>PayloadVersion</key>
        <integer>1</integer>
        <key>ServerURL</key>
        <string>https://server-domain/</string>
        <key>SignMessage</key>
        <false/>
        <key>Topic</key>
        <string>push_topic</string>
    </dict>


YOUR-ID_CERTIFICATE-PAYLOADUUID PayloadUUID (SCEP PKCS12)


, , PDF IOS MDM Intrepidus Group.

, Device Console , . .


IdentityCertificateUUID, PayloadType com.apple.security.pkcs12 ( PKCS12) PayloadType com.apple.security.scep ( SCEP).

MDM IPCU. , PKCS12 . com.apple.security.pkcs12, PayloadUUID IdentityCertificateUUID MDM. !

SCEP IPCU, SCEP PayloadUUID. , SCEP , PKCS12. SCEP, , .

+3
source

More articles:


All Articles