iOS：用于移动设备管理的配置文件 [英] iOS: config profile for mobile device management

问题描述

我可以在Mac OS 10.6.8中创建和安装（在iOS设备中）由iPhone配置实用程序（IPCU）v3.5（289）生成的一般mobileconfig配置文件。

I am able to create and install(in iOS devices) general mobileconfig profile generated by iPhone configuration utility(IPCU) v3.5(289) in Mac OS 10.6.8.

但是当我为移动设备管理生成配置文件时，无法在iOS设备上安装。

But when I am generating config profile for mobile device management, not able to install it in iOS devices.

我想知道设置我应该使用哪个证书的身份。
我有iOS开发者帐户和iOS企业帐户。所以我可以创建所需的证书。

I want to know to set the identity which certificate should I use. I have iOS developer account and iOS Enterprise account.So I can create the required certificate.

对于身份部分，我试图使用SCEP也没有运气，所以我想在凭据中使用所需的证书。

For identity section I tried using SCEP also, but no luck,so I want to use the required certificate in Credentials.

如果有人有任何示例mdm配置文件，请分享它。任何帮助将不胜感激。 b $ b

If some one has any sample mdm config profile please share it.Any help will be appreciated.

推荐答案

在服务器端生成自签名ssl证书时，生成identity.p12证书和此证书，您需要在IPCU的身份部分使用。

While generate self-signed ssl certificate in server side,generate identity.p12 certificate and this certificate you need to use in identity section of IPCU.

这几行可用来产生idendtity.p12

These few lines you can use to generate the idendtity.p12

//Creating the device Identity key and certificate request

openssl genrsa 2048 > identity.key
openssl req -new -key identity.key -out identity.csr


//Signing the identity key with the CA. 
//Give it a passphrase. You'll need to include that in the IPCU profile.

openssl x509 -req -days 365 -in identity.csr -CA cacert.crt -CAkey cakey.key -CAcreateserial -out identity.crt

openssl pkcs12 -export -out identity.p12 -inkey identity.key -in identity.crt -certfile cacert.crt

这篇关于iOS：用于移动设备管理的配置文件的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！