Generate Mdm Certificate

Generating MDM certificate

Yes, in order to become an MDM vendor with Apple, you need an Enterprise Developer Program; this program requires you to register it in a company name (not a personal name), be registered with your country's tax department, and also obtain a DUNS (Dun & Bradstreet) number.

All in all, just a bit of paperwork and a few hundred dollars would set you straight.

generate MDM certificate

To MDM capabilities of iOS you need to get MDM certificate using your Enterprise developer account.The generated APNS certificate for MDM will be used as MDM certificate.You can get more details in third party MDM vendors site about how to generate MDM certificate. For example you can go through mcafee site or follow the below steps.

1)Follow MDM_Protocol pdf .

2)Follow this page: http://www.softhinker.com/in-the-news/iosmdmvendorcsrsigning

Then verify few things.

remove the passphrase from customerPrivateKey.pem using this command

openssl rsa -in customerPrivateKey.pem -out PlainKey.pem

Then merge your APNS certificate (for example CustomerCompanyName.pem) downloaded from the portal https://identity.apple.com/pushcert/ using this command

cat CustomerCompanyName.pem PlainKey.pem > PlainCert.pem

Now this PlainCert.pem file can be used in your server as APNS/MDM certificate.

3)For MDM config profile use IPCU and look in to this also.

How to generate development MDM/APNS certificate?

My suggestion is try production APNS you can use this production APNS for live MDM product also.

If you are following this page, then take care of few things and see the question also.

iOS MDM Certificate Expiration

1.If the push notification certificate is renewed the push topic remains the same so the device is still able to receive the push notifications. But if you create a new one, the push topic changes and the device has to be re-enrolled.

2.Yes the CSR should be the same unless the vendor renewed their MDM certificate.

3.When the vendors p12 expires and vendor creates a new one the VendorSignedCSR changes.

MDM Vendor creation - Apple Enterprise

As I understand it moved here based on this mail:

If you created your APNS MDM certificate in the iOS Developer Enterprise Program, please see the "Learn more about MDM push certificate migration" link on the Apple Push Certificates Portal

MDM push certificate creation

Please see detailed steps and source code here to generate plist.