iOS MDM服务和MDM代理应用程序 [英] iOS MDM service and MDM agent app
问题描述
我正在研究iOS中的MDM，并找到有关Apple原生iOS移动设备管理的信息。设备注册到MDM服务器后，服务器可以通过发送命令来管理设备。我在MDM服务器上测试过，看到没有在设备上安装MDM代理应用程序，服务器仍然可以发送配置文件并将策略应用到设备。
I'm researching about MDM in iOS, and find out information about Apple’s native iOS mobile device management. Once the device is enrolled into a MDM server, server can manage the device by sending commands. I tested on a MDM server and saw that without installing MDM agent app on device, server can still send profiles and apply policies to the device.
任何人都可以帮我解决：
Could anyone help me to address:
- Apple本身的iOS移动设备管理是否在iOS内部构建？
- 可以MDM服务器管理设备（安装应用程序，禁用相机，iTunes ...）而无需安装MDM代理应用程序？
- 设备本身如何与MDM服务器通信并自动安装从服务器发送的配置文件？
- 我是否需要企业帐户才能使用iOS MDM服务？
- 我在哪里可以找到有关MDM API的文档以及如何使用它？
- Is Apple’s native iOS mobile device management built inside the iOS itself?
- Can MDM server manage device (install apps, disable camera, iTunes...) without installing a MDM agent app?
- How can the device itself can communicate with MDM server and install profiles sent from server automatically?
- Do I need an enterprise account to use iOS MDM service?
- Where can I find documents about MDM API and how to use it?
推荐答案
Apple的本机iOS移动设备管理是否内置于iOS内部？
Is Apple’s native iOS mobile device management built inside the iOS itself?
是 - 从iOS4设备开始具备MDM功能。
Yes - as of iOS4 devices become MDM-capable.
MDM服务器可以在不安装MDM代理应用的情况下管理设备（安装应用，禁用相机，iTunes ......）吗？
Can MDM server manage device (install apps, disable camera, iTunes...) without installing a MDM agent app?
是的。 MDM代理应用程序唯一能够为您提供的功能是能够报告设备的IP地址/网络信息，自定义日志记录等。默认情况下，iOS不允许跟踪用户的网络详细信息。
Yes. The only thing an MDM Agent app will get you is the ability to report back on the device's IP address / network information, custom logging, etc. By default iOS does not allow for "tracking" a user's network details.
设备本身如何与MDM服务器通信并自动安装从服务器发送的配置文件？
How can the device itself can communicate with MDM server and install profiles sent from server automatically?
这就是我所说的地狱之圆。您的MDM将命令/安装数据包发送到APNs服务器，APNs服务器告诉设备它有来自MDM的挂起命令，设备会向MDM发出指令并进行确认。我的昵称是为了在大型企业中设置防火墙权限所遇到的麻烦。
This is what I refer to as "the circle of hell". Your MDM sends command/installation packets to the APNs server, the APNs server tells the device it has a pending command from the MDM, the device reaches out to the MDM for its instructions and acknowledges. My nickname is for the trouble it takes to get firewall permissions setup in large enterprises.
我是否需要企业帐户才能使用iOS MDM
服务？我在哪里可以找到有关MDM API的文档以及如何使用它？
Do I need an enterprise account to use iOS MDM service? Where can I find documents about MDM API and how to use it?
要使用 MDM服务你不需要企业帐户吗？要创建MDM服务并访问其文档，您执行需要一个企业帐户，每年299美元。
To use an MDM service you do not need an Enterprise account. To create an MDM service and access its documentation you do need an Enterprise account at $299/year.
这篇关于iOS MDM服务和MDM代理应用程序的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
