User profile for user: larry_altsrc
larry_altsrc Author
User level: Level 1
5 points

How do you sign a mobileconfig file?

We've been able to get an unsigned APN file configured on IIS to work properly (for OTA config) - but it says "unsigned".


I've followed the directions listed here to generate a signed mobileconfig file : http://www.rootmanager.com/iphone-ota-configuration/iphone-ota-setup-with-signed -mobileconfig.html


However, whenever I connect with the signed mobileconfig file my iphone says "Safari culd not install a profile due to an unknown error "


Any help would be appreciated.


Thanks,


Larry

iPhone 4, iOS 5.1.1

Posted on Mar 21, 2013 11:52 AM

Reply
1 reply
Sort By: 
User profile for user: bradn
bradn
User level: Level 1
0 points

Aug 29, 2013 2:43 PM in response to larry_altsrc

Those signing instructions did not work for me either - result = invalid mobileconfig file on both iOS and OS X devices.


These definitely did though (shows up as "Verified" on iOS, "Unverified" (but not unsigned) on OS X):


openssl smime \
-sign \
-signer your_server.crt
\
-inkey your_server_cert_key.pem
\
-certfile your_server_cert_chain.pem \
-nodetach \
-outform der \
-in your_unsigned_profile.mobileconfig \
-out your_signed_profile.mobileconfig


info from https://confluence.terena.org/display/tcs/Sign+Apple+mobileconfig+files


and http://www.steveneppler.com/blog/2011/02/09/signing-ios-mobileconfig-files-with- your-certificate (which refers to the previous link)


you're supposed to setup a SCEP server so you don't need to sign the mobileconfig..

Reply

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How do you sign a mobileconfig file?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.
Learn more Sign up