3.11.7 Procedure for creating MDM client certificates (when managing iOS devices)

Upload the MDM signed-certificate request file to create MDM client certificates. You need to perform this procedure only when managing iOS devices.

Prerequisites

• You must purchase a license for the Apple Developer Enterprise Program.

• You must contact Apple to register as MDM vendor.

• You must perform the procedure below on the Mac computer to which the MDM certificate request file was downloaded or created.

• You must create the MDM signed-certificate request file in advance.

Procedure

1. Log in to Apple Push Certificates Portal.

2. Click the Create a Certificate button.

3. Select the check box for accepting the terms of the license agreement, and then click the Accept button.

4. Select the plist_encoded file to be uploaded, and then click the Upload button.

   When the file is uploaded successfully, an MDM certificate file is created.

5. Click the Download button to obtain the certificate file (mdm_vendor.pem).

6. Click the information icon (Certificate Info), and then confirm the UID of the Subject DN.

   Tip

   You need the UID when creating a configuration profile communication server in order to distribute client certificates to iOS devices.

7. Execute the following command to create the APNsMDMPushDev.p12 file from the private key and pem file:

   openssl pkcs12 -export -inkey customerPrivateKey.pem -in mdm_vendor.pem -out APNsMDMPushDev.p12

Related Topics

• 3.11.4 Flow of obtaining the MDM client certificate for SSL communication for the APNs server (when managing iOS devices)

• 3.11.5 Procedure for downloading the MDM certificate request file (when managing iOS devices)

• 3.11.6 Procedure for creating an MDM signed-certificate request file (when managing iOS devices)

• 3.13.4 Procedure for creating a configuration profile on the communication server (when managing iOS devices)

To Page Top