Identity certificate - IOS MDM -


i have few questions regarding identity certificate in profile payload.

forgive ignorance, if questions basic.

1.) found that, can either use scep standard or pkcs12 certificate directly device identification. scep recommended, since private key known device. in case if going implement scep server, need maintain list of public key of identity certificates mapped device, can use later encrypting?

2.) best possible way implement scep server.? there reliable robust methods available adopt instead of writing on our own?

3.) if identity certificate expired?

as basic version while playing around, tried add own p12 certificate payload without using scep.

i tried add base64 encoded p12 certificate in identity payloadcontent key,as mentioned in link reference. got error

the identity certificate “test mdm profile” not found

while installing profile.

  identity_payload['payloadtype'] = 'com.apple.security.pkcs12'   identity_payload['payloaduuid'] = "random-uuid-string"   identity_payload['payloadversion'] = 1   identity_payload['payloadcontent'] = base64.encode64(file.read "identity.p12")   identity_payload['password'] = 'p12secret'

when checked 'configuration profile key reference', mentioned should send binary representation of payload in data. tried,

  identity_payload['payloadcontent'] = converttobinary(file.read "identity.p12")

i got,

the password certificate “identitycertificate” incorrect

i supplying valid password exporting p12 certificate.

what doing wrong?

answering question:

1) need maintain list of public key of identity certificates mapped device, can use later encrypting?

yes. need kind of mapping. can couple of ways:

  • just store in db mapping between certificate common name , device udid.
  • make cn contain udid (i method, because simplifies initial checks)

and pointed out need public key encrypt payloads device.

2) best possible way implement scep server.? there reliable robust methods available adopt instead of writing on our own?

there open source implementation of scep. example jscep have (i used it) , ejbca have (i used too). saw other implementation (in ruby , on). so, can find choose works stack.

3) need renew identity certificate before expeires (the same way other certificates).

4) if profile doesn't work, recommend create same profile in iphone configuration utility , compare yours. of time, missed 1 tag or (it take lot figure out without comparing working one).


-

Popular posts from this blog

c# - ODP.NET Oracle.ManagedDataAccess causes ORA-12537 network session end of file -

overview i want replace oracle.dataaccess orcale. managed dataaccess, opening connection latter throws ora-12537 network session end of file exception. exception message / stack trace {oracleinternal.network.networkexception (0x000030f9): ora-12537 : netzwerksession: dateiende @ oracleinternal.network.readerstream.read(orabuf ob) @ oracleinternal.ttc.orabufreader.getdatafromnetwork() @ oracleinternal.ttc.orabufreader.read(boolean bignoredata) @ oracleinternal.ttc.marshallingengine.unmarshalub1(boolean bignoredata) @ oracleinternal.ttc.ttcprotocolnegotiation.readresponse()} i trying connect oracle 11g database , not have client installed on local machine. working test application (unmanaged) using oracle.dataaccess works fine . using system; using oracle.dataaccess.client; namespace app.odp.unmanaged { internal class program { private static void main(string[] args) { //dummy connection string...
Read more

matlab - Compression and Decompression of ECG Signal using HUFFMAN ALGORITHM -

i want compress , decompress ecg signal stored text message text file , find out file size, cr,prd ratio,and qs. here code compression , decompression of ecg signal using huffman algorithm. i'm trying find out file size, compression ratio,prd ratio,qs. but error i'm getting the ecg file in text format. %clearing variables , screen enter code here clear all; close all; clc; [file1]=uigetfile('*.txt'); %fprintf('enter ecg file name :%s',file1); p=file1; t=sprintf('%s',p); b1=dlmread([file1]); len=length(b1); lead=input('enter lead number :'); %lead=str2double(lead); col2=b1(1:end,lead); e=fix(sqrt(len)); m=1; i=1:e j=1:e g2(i,j)=fix(col2(m)*1000); %amplifying 1000 m=m+1; end end g3=g2; i=1:e j=1:e ...
Read more

utf 8 - split utf-8 string into bytes in python -

i trying split utf-8 string bytes in python 3. problem is, when use bytearray, byte, encode etc functions array size of element 14 bytes, not 1 byte expected. need split text file sequence of bytes , send them byte after byte using sockets. tried this: infile = open (file, "r") str = infile.read() byte_str = bytes(str, 'utf-8') print("size of byte_str",sys.getsizeof(byte_str[0])) print gives me 14, need 1... suggestion? quoting official documentation : sys.getsizeof(object[, default]) return size of object in bytes. object can type of object. built-in objects return correct results, not have hold true third-party extensions implementation specific. only memory consumption directly attributed object accounted for, not memory consumption of objects refers to. if given, default returned if object not provide means retrieve size. otherwise typeerror raised. getsizeof() calls object’s __sizeof__ method , adds ...
Read more