Part 3: Preparing the Push Certificate and Generating Additional Certs
Part 3: Preparing the Push Certificate and Generating Additional Certs
Step 8: Prepare the Push Certificate
Export the Certificate:
- Save it as
mdm.p12
from Keychain Access.
Convert to PEM Format:
bash# Convert the p12 file to a PEM file openssl pkcs12 -in mdm.p12 -out PushCert.pem -nodes
Export the Certificate:
- Save it as
mdm.p12
from Keychain Access.
Convert to PEM Format:
bash
# Convert the p12 file to a PEM file openssl pkcs12 -in mdm.p12 -out PushCert.pem -nodes
Step 9: Generate Additional Certificates
Run the Certificate Generation Script:
- Navigate to the scripts directory and run:bash
./make_certs.sh
- This script will generate necessary certificates and place them in the correct directories.
Identify Important Files:
- Most certificates will be moved to
/server
. Key files include identity.p12
, which will be used later for creating configuration profiles.
Run the Certificate Generation Script:
- Navigate to the scripts directory and run:bash
./make_certs.sh
- This script will generate necessary certificates and place them in the correct directories.
Identify Important Files:
- Most certificates will be moved to
/server
. Key files includeidentity.p12
, which will be used later for creating configuration profiles.
Step 10: Create Enroll.mobileconfig Using iPhone Configuration Utility
Open the iPhone Configuration Utility:
- Create a new configuration profile under
Configuration Profiles -> New
.
Configure General Settings:
- Name: Enter a descriptive name.
- Identifier: Use the identifier from the push certificate (
com.apple.mgmt.External.hexstuffhere
).
Configure MDM Settings:
- Server URL:
https://YOUR_HOSTNAME_OR_IP:8080/server
- Check-In URL:
https://YOUR_HOSTNAME_OR_IP:8080/checkin
- Topic: Matches the identifier from the General section.
- Identity: Use
identity.p12
.
Export and Save the Profile:
- Save the profile as
Enroll.mobileconfig
and move it to your server directory.
Open the iPhone Configuration Utility:
- Create a new configuration profile under
Configuration Profiles -> New
.
Configure General Settings:
- Name: Enter a descriptive name.
- Identifier: Use the identifier from the push certificate (
com.apple.mgmt.External.hexstuffhere
).
Configure MDM Settings:
- Server URL:
https://YOUR_HOSTNAME_OR_IP:8080/server
- Check-In URL:
https://YOUR_HOSTNAME_OR_IP:8080/checkin
- Topic: Matches the identifier from the General section.
- Identity: Use
identity.p12
.
Export and Save the Profile:
- Save the profile as
Enroll.mobileconfig
and move it to your server directory.
Join the conversation