Encrypting and decrypting configuration profiles in Apple Configurator

Question

Level 1

4 points

Encrypting and decrypting configuration profiles in Apple Configurator

I have implemented iPad security controls in a profile using Apple Configurator - Version 2.15.1 (7E12) - and deploy it via USB connection. When I sign a profile, the signing cert's passkey is stored in plain text within the profile (this is known). What I'm trying to figure out is how to encrypt a signed profile, preferably only using AC2, and if it needs to be decrypted when it's deployed, how to handle that.

Once I have the profile completed, it has to be delivered to an a manufacturing company where it and the rest of our product is built, and I do not want them to have the plain text passkey.

Thanks in advance.

Posted on Aug 5, 2022 10:12 AM

Reply

Answer 1

NelsC7

Community Specialist

Aug 6, 2022 4:39 PM in response to scottsohf

Hi scottsohf,

We understand you are attempting to install a profile on your iPad. Take a look at the steps and information in this article to correct the issue.

Install or remove configuration profiles on iPad

Have a good day.

Reply

Answer 2

scottsohf Author

Level 1

4 points

Aug 8, 2022 4:53 AM in response to NelsC7

I don't have any issue deploying profiles to the iPad. It's how to encrypt a signed profile before deploying it.

"What I'm trying to figure out is how to encrypt a signed profile, preferably only using AC2, and if it needs to be decrypted when it's deployed, how to handle that"

Reply

Answer 3

scottsohf Author

Level 1

4 points

Aug 9, 2022 9:04 AM in response to celliott147

We have a third party build and provision our devices, including the iPad that gets shipped with it. They would be the ones to apply the security controls configuration profile the iPad when the device goes though its tests before being shipped to the customer.

Reply

Answer 4

celliott147

Level 6

11,931 points

Aug 9, 2022 11:10 AM in response to scottsohf

If you're managing the device on behalf of the customer, you want to use MDM in case changes are needed in the future. If customers are managing the devices, you do not want to install a profile on the device as that will hinder them from managing the devices.

Reply