The identity certificate for com.xyz.profile.mdm could not be found?

Question

I\'ve bumped into this issue while trying to install a MDM profile onto an ipad as the final part of OTA enrollment.

NSError:
Desc   : The identity certifi         


        

Answer 1

If you are using self-signed ssl then,While generating self-signed ssl certificate in server side,generate identity.p12 certificate and this certificate you need to use in identity section of IPCU.

These few lines you can use to generate the idendtity.p12

//Creating the device Identity key and certificate request

openssl genrsa 2048 > identity.key
openssl req -new -key identity.key -out identity.csr


//Signing the identity key with the CA. 
//Give it a passphrase. You'll need to include that in the IPCU profile.

openssl x509 -req -days 365 -in identity.csr -CA cacert.crt -CAkey cakey.key -CAcreateserial -out identity.crt

openssl pkcs12 -export -out identity.p12 -inkey identity.key -in identity.crt -certfile cacert.crt

Answer 2

You have to send an identity certificate with the payload for the device to accept the profile. The PayloadUUID of this certificate needs to be set as the value of the IdentityCertificateUUID in the MDM dict.

Try creating a profile with the iPCU to check the format of the Credential block.