企业部署证书和配置文件 [英] Enterprise Deployment certificate and profiles

问题描述

我当前正在使用iOS Developer Enterprise Program进行企业部署.我想知道证书和/或配置文件过期时会发生什么.现在，我尽可能地创建了一堆配置文件.我想知道是否可以安全地删除可能链接到某个应用程序的旧配置文件，否则这些应用程序将停止运行.以某种方式，已经下载应用程序的用户将无法打开该应用程序，或者新用户无法下载该应用程序.

I'm currently using iOS Developer Enterprise Program for Enterprise Deployment. I want to know what happen when the Certificate and/or the Provisioning profile expire. For now I created a bunch of provisioning profiles to be as far as I can to the expiration date. I want to know if I can securely delete old provisioning profiles that are possibly linked to an app or the apps will stop working. Is it possible in some way that a user who has already download an app will not be able to open it or a new user not be able to download it.

谢谢

推荐答案

对于要在iOS设备上运行的应用程序，唯一的要求是，在使用该设备签名的设备上至少有一个有效(未过期)的配置文件有效证书(未过期/已删除)，其捆绑包ID与您尝试运行的应用的捆绑包ID相匹配.

The only requirement for an app to run on an iOS device is that there is at least one valid (non expired) provisioning profile on the device that is signed with a valid certificate (non expired / deleted) that has a bundle ID that matches the bundle id of the app you are trying to run.

因此，假设我有一年中为一个应用程序创建的2个配置文件.该应用程序的捆绑软件ID为"com.example.testapp".其中一个配置文件是使用应用程序ID"com.example.testapp"创建的，有效期为1个月.使用通配符应用程序ID"com.example.*"创建了另一个配置文件，该配置文件将在3个月后过期.您可以随时安全地删除配置文件并创建一个新的配置文件，而不会影响当前已部署的应用程序在设备上的运行.一旦达到到期日期，他们将停止工作.

So let's say I have 2 provisioning profiles I've created over the year for one app. The app's bundle ID is "com.example.testapp". One of the provisioning profiles was created with the app id "com.example.testapp" and it expires in 1 month. Another provisioning profile was created with a wildcard app id "com.example.*" and it expires in 3 months. You can safely delete the provisioning profiles and create a new one at any time, without affecting currently deployed apps from being able to run on devices. They will stop working once they hit the expiration date.

继续此示例，假设您在同一设备上安装了另一个应用程序，捆绑ID为"com.example.testapp2"，并且该应用程序最初是通过专门使用应用程序ID为"com.example"的配置文件安装的. testapp2"，并且配置文件将于明天过期.明天之后，该应用程序仍将正常运行，因为即使"com.example.testapp2"设置配置文件已过期，也有另一个省.设备上具有相匹配的通配符应用程序ID的配置文件，并且该配置文件尚未过期.

Continuing this example, let's say you have another app installed on the same device with a bundle id of "com.example.testapp2" and it was originally installed with a provisioning profile that specifically used the app id "com.example.testapp2" and the provisioning profile expires tomorrow. After tomorrow, the app will still work, because even though the "com.example.testapp2" provisioning profile is expired, there is another prov. profile on the device with a wildcard app id that matches, and that profile has not yet expired.

在仅安装了测试应用程序2且从未安装过通配符配置文件的另一台设备上，该应用程序将停止运行.您可以手动安装新的配置文件(通过电子邮件发送给设备用户)，也可以安装与新的配置文件捆绑在一起的新应用(或再次使用同一应用).

On another device that only has test app 2, and never had the wild card provisioning profile installed, the app will stop working. You can either manually install the new provisioning profile (email it to the device user), or install a new app (or the same app again) bundled with the new provisioning profile.

长话短说，删除配置文件通常是安全的，但是在您准备好重新打包所有内部应用程序之前，请不要使证书无效.

So long story short, deleting provisioning profiles is generally safe, but do not invalidate the certificate until you are ready to re-package all your internal apps.

这篇关于企业部署证书和配置文件的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！