iOS MDM 证书到期 [英] iOS MDM Certificates Expiry

问题描述

我正在创建 MDM 服务器并已成功完成所有步骤，并且能够在设备上安装配置文件.

I am creating an MDM Server and have successfully completed all the steps and was able to install the profile on the device.

在安装在设备上的 .mobileconfig 文件中，我们传递了 SSL 证书、APNS 证书和配置文件信息.

In the .mobileconfig file which is installed on the device, we pass the SSL certificate, APNS certificate and profile information.

1) 如果服务器上的 SSL 证书更改了怎么办?(估计很多人都没有实践过，或者根本没有实践过，但还是想知道这种情况发生时会发生什么)

1) What if the SSL Certificate on the server is changed? (I guess this is not practiced by many or not practiced at all but still want to know what happens when this case occurs)

2) APNS 证书过期一年后会怎样?

2) What happens after the APNS certificate is expired after one year?

如何在已安装配置文件的设备上更新配置文件.配置文件应该手动删除并重新安装还是有其他方法?

How do I update the profiles on devices in which the profiles were already installed. Should the profiles be manually deleted and reinstalled or is there any other way?

推荐答案

1. 关于 SSL 证书:使用 SSL 证书的 mdm 配置文件不受影响，可以继续使用.唯一会发生的事情是在设备上查看配置文件时，它会显示特定的签名证书已过期.解决方案:您需要使用新证书再次对 mdm 配置文件进行签名.请参阅此问题的解决方案.

您可以选择在 APNS 证书到期前续订.Apple 会在证书到期前向您发送电子邮件(发送至生成 APNS 证书的 Apple-id).如果您在到期前续订证书，则无需重新注册设备.如果证书已经过期，您需要使用相同的旧 Apple-id 创建一个新证书，并且必须重新注册所有设备才能接收 MDM 推送.

You have option to renew the APNS certificate before it expires. Apple sends you email (to the apple-id that generated the APNS certificate) before the certificate expires. If you renew the certificate before expiration, you don't have to re-enroll the devices. In case the certificate is already expired, you need to create a new one using the same old apple-id and will have to re-enroll all the devices to receive the MDM push.

这篇关于iOS MDM 证书到期的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！