There is no App Configuration setting in the URL below, is there a way to set it?
https://github.com/apple/device-management/blob/release/declarative/declarations/configurations/app.managed.yaml
Post
Replies
Boosts
Views
Activity
When I registered an MDM profile and tried to install an application via MDM on a device on which user enrollment was completed, an error occurred. Is there any countermeasure for this?
errors message
{
"CommandUUID": "5xxxx4x8-95bb-4f62-8bb3-1d7e2b044137",
"EnrollmentID": "7***9774-0373-404B-90CC-5FE8F9B59696",
"ErrorChain": [
{
"ErrorCode": 12008,
"ErrorDomain": "MDMErrorDomain",
"LocalizedDescription": "MDM要求が無効です。",
"USEnglishDescription": "The MDM request is invalid."
}
],
"RejectionReason": "PurchaseMethodNotSupported",
"Status": "Error"
}
I performed the following process in User Enrollment, but it seems that the registration process cannot be performed because the profile format is incorrect or the parameters are invalid.
General > Access your account with VPN and device management
Redirect to authentication screen as MDM server is accessed
Set credentials and redirect
session[:token] = "xxxxxxxxxx"
redirect_to "apple-remotemanagement-user-login://authentication-results?access-token=" + session[:token]
Submit MDM profile
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EncryptedPayloadContent</key>
<data>
MIINqgYJKoZIhvcNAQcDoIINmzCCDZcCAQAxggOeMIH/AgEAMGgwWjELMAkGA1UEBhMC
VVMxEzARBgNVBAoTCkFwcGxlIEluYy4xFTATBgNVBAsTDEFwcGxlIGlQaG9uZTEfMB0G
A1UEAxMWQXBwbGUgaVBob25lIERldmljZSBDQQIKAzNmefeeFseQqzANBgkqhkiG9w0B
AQEFAASBgKS2ch7zsM9M/UflrnAzjjlpcKFzKTR2vRBIeTQ6ZUM79ZFQBkhB/TAsi3NO
tkYIy0Kr/xQD86PDlXpF48JDtuhgB0aQ+Dr28/IIpcTnvR9wE1SFFydnHOoXf5sUvMrZ
9JyhlfGeUGGjfV4dYSVTNv41DFXfjksG9qDZTEHYzyC3MIIBFQIBADB+MHkxCzAJBgNV
BAYTAlVTMRMwEQYDVQQKEwpBcHBsZSBJbmMuMSYwJAYDVQQLEx1BcHBsZSBDZXJ0aWZp
Y2F0aW9uIEF1dGhvcml0eTEtMCsGA1UEAxMkQXBwbGUgaVBob25lIENlcnRpZmljYXRp
......
</data>
<key>PayloadDescription</key>
<string>Test</string>
<key>PayloadDisplayName</key>
<string>test</string>
<key>PayloadIdentifier</key>
<string>localhost.mdm</string>
<key>PayloadOrganization</key>
<string>Test</string>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>16a91248-230c-423c-9dd9-a1480e911b9b</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>
EncryptedPayloadContent
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<array>
<dict>
<key>AssignedManagedAppleID</key>
<string>hogehoge@test.link</string>
<key>CheckInURL</key>
<string>https://test.link/api/ios/checkin</string>
<key>CheckOutWhenRemoved</key>
<true/>
<key>EnrollmentMode</key>
<string>BYOD</string>
<key>IdentityCertificateUUID</key>
<string>fc7532ea-7fd7-4942-80ba-9fafa0ac5f0a</string>
<key>PayloadDescription</key>
<string>Test</string>
<key>PayloadDisplayName</key>
<string>test</string>
<key>PayloadIdentifier</key>
<string>localhost.mdm</string>
<key>PayloadOrganization</key>
<string>Test</string>
<key>PayloadType</key>
<string>com.apple.mdm</string>
<key>PayloadUUID</key>
<string>9eebe196-17d5-4613-953b-b60e7111282e</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>ServerURL</key>
<string>https://test.link/api/ios/mdm</string>
<key>SignMessage</key>
<true/>
<key>Topic</key>
<string>com.apple.mgmt.External.16a8b279-c4a9-4a33-9f1e-e155ab8161fd</string>
<key>UseDevelopmentAPNS</key>
<false/>
</dict>
<dict>
<key>PayloadContent</key>
<dict>
<key>Challenge</key>
<string>dfbd7b151e5c1c03f8a59e775f393791ca618201</string>
<key>GetCACaps</key>
<array>
<string>POSTPKIOperation</string>
<string>Renewal</string>
<string>AES</string>
<string>SHA-256</string>
</array>
<key>Key Type</key>
<string>RSA</string>
<key>Key Usage</key>
<integer>5</integer>
<key>Keysize</key>
<integer>1024</integer>
<key>Name</key>
<string>CA</string>
<key>Subject</key>
<array>
<array>
<array>
<string>O</string>
<string>Test</string>
</array>
</array>
<array>
<array>
<string>CN</string>
<string>e1af8f64-be70-46d3-97b7-fb70e8e0f0f8</string>
</array>
</array>
</array>
<key>URL</key>
<string>https://test.link/api/scep</string>
</dict>
<key>PayloadDescription</key>
<string>Test</string>
<key>PayloadDisplayName</key>
<string>Test</string>
<key>PayloadIdentifier</key>
<string>localhost.encryption-cert-request</string>
<key>PayloadOrganization</key>
<string>Test</string>
<key>PayloadType</key>
<string>com.apple.security.scep</string>
<key>PayloadUUID</key>
<string>fc7532ea-7fd7-4942-80ba-9fafa0ac5f0a</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</array>
</plist>
I am sending DeclarativeManagement with the MDM command, but it seems that it is not valid even if I send it to declaration-items
What can you think of?
iOS 16
MDM Command
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>Data</key>
<data>
eyJTeW5jVG9rZW5zIjp7IlRpbWVzdGFtcCI6IjIwMjMtMTAtMThUMTE6MDY6MDJaIiwi
RGVjbGFyYXRpb25zVG9rZW4iOiJiNjU0NDAyN2EzMTVjZDAwODVkNGNmMDgxNzQ2MjRj
MmQxNDI0NDQ4MDQzMGE4N2IxNzZhMjcyN2U3MzY2MDA5In19
</data>
<key>RequestType</key>
<string>DeclarativeManagement</string>
</dict>
<key>CommandUUID</key>
<string>3398d0c0-8b36-4647-86ab-6a63f26d1576</string>
<key>UDID</key>
<string>XXXXXXX-ZZZZZZZZZZZZZz</string>
</dict>
</plist>
declaration-items Rersponse(json)
{
"DeclarationsToken": "1429e356-c51a-42a3-aff2-22963df30202",
"Declarations": {
"Assets": [
],
"Management": [
{
"Type": "com.apple.management.organization-info",
"Identifier": "e07d18d6-4ec6-432a-b474-9b8816d029a2",
"ServerToken": "4922d69c-c231-426d-9598-c3acb612069e",
"Payload": {
"Email": "email@example.com",
"Name": "Acme Inc",
"URL": "https://www.example.com"
}
}
],
"Configurations": [
{
"Type": "com.apple.configuration.legacy",
"Identifier": "84fe24b1-ac21-4a29-b279-70f715b3ac82",
"ServerToken": "0283b145-5791-4d7a-8a8e-7690e3a6db98",
"Payload": {
"ProfileURL": "https://gist.githubusercontent.com/jessepeterson/5a633f627bfc23f74153add89aee07f1/raw/f27458e05fd01b8ff9e7872a54aa2d543131afaa/cert-profile.mobileconfig"
}
},
{
"Type": "com.apple.configuration.passcode.settings",
"Identifier": "1f0ce810-6c6b-4021-86ae-2844396e58f8",
"ServerToken": "791e16ff-2011-4468-a201-de531d0c2326",
"Payload": {
"RequirePasscode": true,
"RequireComplexPasscode": false,
"RequireAlphanumericPasscode": false
}
},
{
"Type": "com.apple.configuration.management.status-subscriptions",
"Identifier": "004b8c95-3500-4ac8-9480-54311a462929",
"ServerToken": "888a4935-ef8d-4286-8c39-776fd8675f57",
"Payload": {
"StatusItems": [
{
"Name": "device.identifier.serial-number"
},
{
"Name": "device.identifier.udid"
},
{
"Name": "device.model.family"
},
{
"Name": "device.model.identifier"
},
{
"Name": "device.model.marketing-name"
},
{
"Name": "device.operating-system.build-version"
},
{
"Name": "device.operating-system.family"
},
{
"Name": "device.operating-system.marketing-name"
},
{
"Name": "device.operating-system.supplemental.build-version"
},
{
"Name": "device.operating-system.supplemental.extra-version"
},
{
"Name": "device.operating-system.version"
},
{
"Name": "mdm.app"
},
{
"Name": "passcode.is-compliant"
},
{
"Name": "passcode.is-present"
},
{
"Name": "test.array-value"
},
{
"Name": "test.boolean-value"
},
{
"Name": "test.dictionary-value"
},
{
"Name": "test.error-value"
},
{
"Name": "test.integer-value"
},
{
"Name": "test.real-value"
},
{
"Name": "test.string-value"
}
]
}
}
],
"Activations": [
{
"Type": "com.apple.activation.simple",
"Identifier": "90cb68bc-c37d-40cc-8cef-b462947329b2",
"ServerToken": "26985dc4-b0a0-43ef-afae-6ad3e89d5b9d",
"Payload": {
"StandardConfigurations": [
"e07d18d6-4ec6-432a-b474-9b8816d029a2",
"84fe24b1-ac21-4a29-b279-70f715b3ac82",
"1f0ce810-6c6b-4021-86ae-2844396e58f8",
"004b8c95-3500-4ac8-9480-54311a462929"
]
}
}
]
}
}
There is an item for EnforceRoutes in the following URL
https://developer.apple.com/documentation/devicemanagement/vpn/ikev2?changes=latest_minor
I don't quite understand "If true, all the VPN's non-default routes take precedence over any locally defined routes." in the function description of this item.
I would appreciate it if you could let me know how I can check this.
We are investigating whether eSIM activation is possible.
Do you know how to set the SM-DP+ address, activation, and confirmation code?
I referred to the following, but I did not know how to set the activation code.
https://developer.apple.com/documentation/devicemanagement/refreshcellularplanscommand/command