企业部署认证和配置文件 [英] Enterprise Deployment certificat and profiles

问题描述

我目前使用iOS开发人员企业计划进行企业部署。我想知道当证书和/或配置配置文件过期时发生了什么。现在我创建了一堆供应配置文件，尽可能的到到期日期。我想知道我是否可以安全删除可能链接到应用程序的旧配置文件，否则应用程序将停止工作。在某些方面，已经下载应用程式的使用者无法开启应用程式，或是新使用者无法下载应用程式。

I'm currently using iOS Developer Enterprise Program for Enterprise Deployment. I want to know what happen when the Certificate and/or the Provisioning profile expire. For now I created a bunch of provisioning profiles to be as far as I can to the expiration date. I want to know if I can securely delete old provisioning profiles that are possibly linked to an app or the apps will stop working. Is it possible in some way that a user who has already download an app will not be able to open it or a new user not be able to download it.

感谢

推荐答案

iOS设备上运行应用程序的唯一要求是至少有一个有效（未到期）在使用有效证书（未过期/已删除）签署的设备上，该证书的捆绑ID与您尝试运行的应用程序的捆绑ID相匹配。

The only requirement for an app to run on an iOS device is that there is at least one valid (non expired) provisioning profile on the device that is signed with a valid certificate (non expired / deleted) that has a bundle ID that matches the bundle id of the app you are trying to run.

因此，我有一个应用程序在一年中创建的2个配置文件。应用的打包ID为com.example.testapp。其中一个配置配置文件是使用应用IDcom.example.testapp创建的，并且在1个月内过期。另一个配置文件是使用通配符应用程序IDcom.example。*创建的，并且在3个月后过期。您可以随时安全删除配置文件并创建新的配置文件，而不会影响当前部署的应用程序能够在设备上运行。一旦他们达到有效期，他们将停止工作。

So let's say I have 2 provisioning profiles I've created over the year for one app. The app's bundle ID is "com.example.testapp". One of the provisioning profiles was created with the app id "com.example.testapp" and it expires in 1 month. Another provisioning profile was created with a wildcard app id "com.example.*" and it expires in 3 months. You can safely delete the provisioning profiles and create a new one at any time, without affecting currently deployed apps from being able to run on devices. They will stop working once they hit the expiration date.

继续此示例，假设您在同一设备上安装了另一个应用，其捆绑ID为com.example.testapp2，并且最初安装了配置配置文件，该配置文件专门使用应用程序IDcom.example.testapp2，并且供应配置文件将在明天过期。明天之后，该应用仍然可以正常工作，因为即使com.example.testapp2配置文件已过期，仍有另一个提示。配置文件，其中通配符应用程序ID匹配，并且该配置文件尚未过期。

Continuing this example, let's say you have another app installed on the same device with a bundle id of "com.example.testapp2" and it was originally installed with a provisioning profile that specifically used the app id "com.example.testapp2" and the provisioning profile expires tomorrow. After tomorrow, the app will still work, because even though the "com.example.testapp2" provisioning profile is expired, there is another prov. profile on the device with a wildcard app id that matches, and that profile has not yet expired.

在另一台只有测试应用程式2且未安装通配设定设定档的装置上，应用程式将停止运作。您可以手动安装新的设置配置文件（通过电子邮件将其发送给设备用户），也可以安装与新设置配置文件捆绑在一起的新应用程序（或同一应用程序）。

On another device that only has test app 2, and never had the wild card provisioning profile installed, the app will stop working. You can either manually install the new provisioning profile (email it to the device user), or install a new app (or the same app again) bundled with the new provisioning profile.

这么长的故事短，删除配置文件通常是安全的，但不要无效的证书，直到你准备重新打包所有的内部应用程序。

So long story short, deleting provisioning profiles is generally safe, but do not invalidate the certificate until you are ready to re-package all your internal apps.

这篇关于企业部署认证和配置文件的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！