mdm

Update an expired iOS MDM profile

无人久伴 提交于 2019-12-01 00:06:39
So I set up the SCEP server to generate an iOS identity certificate which is only valid for a short time. When it expires the profile says "This profile has expired. Update this profile for a newer version", and presents an "Update Profile" button. However clicking this button simply tells me "Profile could not be updated. Please contact your networks Administrator". No attempt is made to contact either the MDM service or the SCEP service, and no indication of any MDM activity or errors appear in the log. Enrolling the device again works fine, so I don't suspect calling a network administrator

How to create MDM Enrollment Profile for iOS

☆樱花仙子☆ 提交于 2019-11-30 19:17:48
问题 I am trying to create a simple MDM server to manage iOS devices. But I am struggling with "MDM Enrollment Profile", I am creating this profile using ipcu. But when I am opening this profile through email (or weblink) there is nothing happening. Let me share what I am doing to create "MDM Enrollment Profile" - Creating new profile in ipcu. - Filling details for "General" section - Filling details for "Mobile Device Management" - Filling details for "Credentials" as it is required to complete

Updating iOS apps automatically with an MDM + Enterprise license

末鹿安然 提交于 2019-11-30 18:11:15
问题 We have an iPad app running in a kiosk mode deployed across multiple physical locations. We'd like to have a solution where any updates to the app are pushed automatically to the device so that the client does not have to touch each iPad they have. Our client has an existing MDM software that notifies the user if there's an update, but since it's intended to be a kiosk we don't want the general public to actually do the update by themselves. Does anyone know if this is possible at all? Thanks

MDM: APNS notification does not reach iPhone

∥☆過路亽.° 提交于 2019-11-30 16:43:19
A notice does not reach a terminal. Please let me know. Hello. Thank you. iPhone 4S iOS 5.1 I wrote the following ruby script. And it performed from the MDM server. However, a notice does not reach an iPhone terminal. Please let me know. A setup by ."mobileconfig" was completed and the topic and the device token have been PUT to the MDM server. It checked that the right information was also acquirable, It is confirmed that renewal of a message or a badge is made to an iPhone terminal in APNs. Only APNs of MDM does not reach an iPhone terminal. I would like to solve this problem. If you please,

Using autonomousSingleAppModePermittedAppIDs and UIAccessibilityRequestGuidedAccessSession together with Meraki as MDM to enter single app mode

风格不统一 提交于 2019-11-30 14:18:32
I have a small number of devices I've set as supervised using Apple Configurator. However I'm unable to get the app to successfully enter single app mode using the UIAccessibilityRequestGuidedAccessSession API. I created a configuration profile with restrictions set in the Meraki console, in particular I've set the "Allowed Single App Mode" field in the Meraki console to my app bundle id. I'm assuming this field in Meraki maps to the autonomousSingleAppModePermittedAppIDs configuration key. I've added my app which is an IPA (not installed from the app store) to be installed on the supervised

How to develop mobile device management application in iOS

限于喜欢 提交于 2019-11-30 11:59:16
问题 I have many iOS devices in my company and I have to manage them centrally, so we tried to use third party MDM applications for eg: airwatch but it is very costly. We decided not to use it and are thinking of creating a MDM from scratch. We tried all solutions available online but I didn't get any solution. Can anyone please help me with this. 回答1: iOS MDM is clientless protocol. So, you develop a server, but you don't develop a client application for it. Actually, there is a client app, but

iOS MDM profile signing, which certificate to use?

纵饮孤独 提交于 2019-11-30 10:11:35
Okay, so look at this diagram . There are two little boxes, that signify how a given profile should be signed. In Phase 2, step 1, it says "Apple issued certificate", but it doesn't say which apple issued certificate (they issue more than one). I have tried my developer certificate and the MDM (APNS) certificate. It wasn't one of those. Is there a third magic certificate I somehow need (and how do I get it)? In Phase 3, step 2, it says "Identity certificate", but again it's a little sketchy on the details. The only identity certificate I know of is installed on the device, using the device's

OurPact Parental Control over iOS device

南楼画角 提交于 2019-11-30 09:58:38
I asked a question recently about whether I can have parental control over iOS devices. Link of the question is below :- Is it possible to write a parental control app for iOS? A senior developer answered and said this is not possible to do without jailbreak. But i found an app named " OurPact " and by using that i can control any other device. How they can have parental control if this not possible in iOS? OurPact use the Mobile Device Management (MDM) protocol, which provides a way to tell a device to execute certain management commands remotely. The way it works is straightforward. During

MDM Server certificate to be used for SSL handshake with iPhone device

帅比萌擦擦* 提交于 2019-11-30 05:32:00
I am trying to perform SSL Handshake between the iPhone device and my MDM Server. I have used iPhone configuration Utility (iPCU) and configured SCEP and MDM. SCEP works fine, the device receives the issued certificate from the CA. In the MDM Payload, I have used the subject of the APNS certificate in the topic and entered the server IP with port 1234. As an identity, I have used the identity of the SCEP Certificate. The iPhone generates the key and enrolls successfully, but then when it tries to install the profile by contacting the MDM server, I receive this error in the IPCU console: The

Can I prevent an iOS user from changing the date and time?

让人想犯罪 __ 提交于 2019-11-30 05:03:31
I want to deploy managed iOS devices to employees of the company, and the app they will use will timestamp data that will be recorded locally, then forwarded. I need those timestamps to be correct, so I must prevent the user from adjusting the time on the device, recording a value, then resetting the date and time. Date and time will be configured to come from the network automatically, but the device may not have network connectivity at all times (otherwise I would just read network time every time a data value is recorded). I haven't seen an option in Apple Configurator to prevent changing