objective c - MDM iPCU Profile Installation Failed in iOS SDK -

-

i doing mdm vendor set , having apple enterprise account same.but after completing steps getting issue when try install iphone configuration utility file on iphone.we getting alert saying “profile installation failed”.please suggest suspect may wrong.following steps followed profile creation.

for vendor:

  1. i created vendor csr on macbook called vendor.csr.

    email: enterprise account email.

    common name: company name.

    saved disk.

  2. uploaded vendor.csr file enterprise account , downloaded mdm.cer file account.

  3. loaded certificate key chain.

  4. exported .p12 file private.p12 file.

  5. extracted private key using command : openssl pkcs12 -in private.p12 -nocerts -out key.pem

  6. extracted certificate : openssl pkcs12 -in private.p12 -clcerts -nokeys -out cert.pem

  7. convert certificate des form : openssl x509 -in cert.pem -inform pem -out mdm.cer -outform des

8.stripped password private key : openssl rsa -in key.pem -out private.key

for customer:

  1. now created 1 more csr push same macbook called push.csr.

    email: company support email.

    common name : company name push

    saved disk.

python code :

link: https://github.com/grinich/mdmvendorsign

i got python code above link plist encoded file files generated above i.e. private.key, push.csr, mdm.cer.i renamed files according command below , generated plist encoded file.

command : python mdm_vendor_sign.py --csr user_submitted_csr.csr --key mdm_vendor_private.key --mdm mdm_certifiate_from_apple.cer

push cert :

  1. then uploaded plist encoded file on “https://identity.apple.com/pushcert/” , downloaded resulting push certificate there.

  2. installed pushcert downloaded key chain , exported in p12 format , call mdm.p12.

  3. converted mdm.p12 pem format : openssl pkcs12 -in mdm.12 -out pushcert.pem -nodes

iphone configuration utility :

i implemented 3 sections of ipcu. server setup using rapidssl server set up.

  1. general

    a. name : company private limited

    b. identifier: com.mycompany.mdm.profile

    c. organization : company name

    d. description : version 1.0

    e. security : always.

  2. credentials

    uploaded pushcert.pem file generated @ last step of push cert work.

  3. mobile device management

    a. server url : https://xyz.server

    b check in url : https://xyz.checin

    c. topic :com.apple.mgmt.external.xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

    d. identity : selected credential.

export ipcu -> none/signconfigurationprofile (tried both).

now file failing install on device when send through mail , getting message profile installation failed.what understand logs device unable make connection server.please suggest me how resolve that.

device logs: 

nov 27 19:02:21 iphone profiled[114] <notice>: (note ) mc: checking mdm installation...  nov 27 19:02:21 iphone profiled[114] <notice>: (note ) mc: ...finished checking mdm installation.  nov 27 19:02:21 iphone profiled[114] <notice>: (note ) mc: beginning profile installation...  nov 27 19:02:21 iphone profiled[114] <error>:  sectrustevaluate  [leaf anchortrusted]  nov 27 19:02:23 iphone locationd[63] <notice>: gesture enabledfortopclient: 0, enabledindaemonsettings: 0  nov 27 19:02:24 iphone locationd[63] <notice>: gesture enabledfortopclient: 0, enabledindaemonsettings: 0  nov 27 19:02:24 iphone profiled[114] <error>:  sectrustevaluate  [leaf anchortrusted]  nov 27 19:02:26 iphone profiled[114] <notice>: (error) mdm: cannot authenticate. error: nserror:  desc   : connection server not established.  desc: connection server not established.  domain : mchttptransactionerrordomain  code   : 23001  type   : mcfatalerror  params : (      "https://mdm.mycompanyname.com/service1.svc",      500  )  nov 27 19:02:26 iphone profiled[114] <notice>: (error) mc: cannot install mdm “mobile device management”. error: nserror:  desc   : payload “mobile device management” not installed.  sugg   : connection server not established.  desc: payload “mobile device management” not installed.  sugg: connection server not established.  domain : mcinstallationerrordomain  code   : 4001  type   : mcfatalerror  params : (      "mobile device management"  )  ...underlying error:  nserror:  desc   : connection server not established.  desc: connection server not established.  domain : mchttptransactionerrordomain  code   : 23001  type   : mcfatalerror  params : (      "https://mdm.mycompanyname.com/service1.svc",      500  )  nov 27 19:02:26 iphone profiled[114] <notice>: (error) mc: rolling installation of profile “com.mycompanyname.mdm.profile”...  nov 27 19:02:26 iphone profiled[114] <notice>: (error) mc: installation of profile “com.mycompanyname.mdm.profile” failed error: nserror:  desc   : profile “mycompanyname” not installed.  sugg   : payload “mobile device management” not installed.  desc: profile “mycompanyname” not installed.  sugg: payload “mobile device management” not installed.  domain : mcprofileerrordomain  code   : 1009  type   : mcfatalerror  params : (      "mycompanyname"  )

the certificate generated mdm vendor cert apple isn't used device authentication. it's used particular server send notifications apns.

the identity in ipcu (which deprecated long ago) client certificate. remember tls certificates need valid , trusted. server rejecting client http 500, start investigating server logs why.

really though if developing own mdm solution open dts incident apple. api documents published folks in enterprise developer program , not publicly available. rather here, mdm section of apple developer forums better place discuss it.


Comments

Post a Comment

Popular posts from this blog

matlab - "Contour not rendered for non-finite ZData" -

-
i'm trying plot frequency characteristic equation using ezplot, matlab gives following warning, "contour not rendered non-finite zdata". have used command plot frequency equations warning , plot display empty , not change axis range well. can please help. appreciated. here's code i'm using. % transfer matrix case-i, thin rotor clear all; clc; ei = 1626; l = 0.15; m = 0.44108; = 2.178*10^-4; i_p = 2.205*10^-5; itr = 0.24; i_pr = 0.479; syms p n; f = [1 l*1i l^2/(2*ei)*1i l^3/(6*ei); 0 1 l/ei -l^2/(2*ei)*1i; 0 0 1 -l*1i; 0 0 0 l]; p = [ 1 0 0 0; 0 1 0 0; 0 -it*p^2+i_p*n*p 1 0; -m*p^2 0 0 1]; p_r = [1 0 0 0; 0 1 0 0; 0 -itr*p^2+i_pr*n*p 1 0; -m*p^2 0 0 1]; = f*p*f*p*f*p*f; b = p_r*f*p*f*p*f; r = a(1,2)/a(1,4); a12_p = 0; a22_p = a(2,2)-r*a(2,4); a32_p = a(3,2)-r*a(3,4); a42_p = a(4,2)-r*a(4,4); ap(2,2) = a22_p; ap(3,2) = a32_p; ap(4,2) = a42_p; ap(4,4) = 1; c = b*ap; m = [c(3,2) c(3,4); c(4,2) c(4,...
Read more

delphi - Indy UDP Read Contents of Adata -

-
i using indy udp server read string of data. however, not know how work adata parameter. can around converting binary using bytetobin function below , convert hex using bintohex1 . feel stupid , works slow. know how can directly results without 2 conversions? thanks!! here codes: procedure tform1.idudpserver1udpread(athread: tidudplistenerthread; const adata: tidbytes; abinding: tidsockethandle); var buf: tidbytes; buffer: string; data_received: string; begin if bytestostring(adata) <> 'hello' begin buffer := hextostring('00'); setlength(buf, length(buffer)); copytidstring(buffer, buf, 0); abinding.sendto(abinding.peerip, abinding.peerport, buf); data_received := bintohex1(bytetobin(adata[1]) + bytetobin(adata[2]) + bytetobin(adata[3]) + bytetobin(adata[4]) + bytetobin(adata[5]) + bytetobin(adata[6]) + bytetobin(adata[7]) + bytetobin(adata[8]) + bytetobin(adata[9]) + bytetobin(adata[10]) + bytetobin(adata[11...
Read more

javascript - Any ideas when Firefox is likely to implement lengthAdjust and textLength? -

-
any ideas when firefox implement lengthadjust andtextlength?..... working svg application. lengthadjust , textlength working fine in chrome not working in fire fox . <svg viewbox = "0 0 500 300" version = "1.1"> <defs> <path id="s3" d="m 10,90 q 100,15 200,70" /> </defs> <g> <text font-size = "20"> <textpath xlink:href="#s3" textlength="205"> short text</textpath> </text> <use xlink:href="#s3" fill="none" stroke="black" stroke-width="1"/> </g> </svg> this implemented in firefox text elements (not textpath or tspan) in case that's ok though can move attribute text element. <svg viewbox = "0 0 500 300" version = "1.1"> <defs> ...
Read more