Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

How do you sign a mobileconfig file?

We've been able to get an unsigned APN file configured on IIS to work properly (for OTA config) - but it says "unsigned".


I've followed the directions listed here to generate a signed mobileconfig file : http://www.rootmanager.com/iphone-ota-configuration/iphone-ota-setup-with-signed -mobileconfig.html


However, whenever I connect with the signed mobileconfig file my iphone says "Safari culd not install a profile due to an unknown error "


Any help would be appreciated.


Thanks,


Larry

iPhone 4, iOS 5.1.1

Posted on Mar 21, 2013 11:52 AM

Reply
1 reply

Aug 29, 2013 2:43 PM in response to larry_altsrc

Those signing instructions did not work for me either - result = invalid mobileconfig file on both iOS and OS X devices.


These definitely did though (shows up as "Verified" on iOS, "Unverified" (but not unsigned) on OS X):


openssl smime \
-sign \
-signer your_server.crt
\
-inkey your_server_cert_key.pem
\
-certfile your_server_cert_chain.pem \
-nodetach \
-outform der \
-in your_unsigned_profile.mobileconfig \
-out your_signed_profile.mobileconfig


info from https://confluence.terena.org/display/tcs/Sign+Apple+mobileconfig+files


and http://www.steveneppler.com/blog/2011/02/09/signing-ios-mobileconfig-files-with- your-certificate (which refers to the previous link)


you're supposed to setup a SCEP server so you don't need to sign the mobileconfig..

How do you sign a mobileconfig file?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.