How to update client profile manually (without APNs)
Currently implementing an OS X Server with a specific goal of device management using the Profile Manager. I have a thorough understanding of APNs roll in this where communication is sent to APNs which then gives the client a notification to "check-in" with the server for updates. So the actual data exchange is only between the server and client. (Like the diagram below...)
However, for security reasons I want to be able to accomplish Client-Server mdm checkin manually without APNs if I want to. In theory, this should be possible because the client obviously runs code to search for the server, communicate, and apply any changes to its configuration profile. Based on the OS X server documentation for this, it does this over SSL to the server for an mdm_checkin. The client also automatically checks the server on each startup, so restarting the machine does in-fact tell it to check the server and gets any profile changes that are holding as tasks. (Obviously, its not ideal to restart every time I want a change...)
Again, for security and troubleshooting purposes, I want to avoid APNs and do this communication manually. I'd also like to avoid downloading from the myDevices portal, or transferring a profile to be double-clicked/opened, etc etc. However, for the life of me I can't find any other documentation or code that may direct me how to do this! It seems like there should be sometime to run or few terminal commands to accomplish this...
Has anyone else attempted this or had success telling a client manually to talk to it's mdm server? (or even using mdmclient?)
Thanks!
Mac Pro, OS X Server