问题描述
有人告诉我应该首先使用IPCU配置SCEP，因此我在Windows服务器2008中设置了一个SCEP服务器。然后在SCEP有效负载中设置URL。但我无法使用MDM Payload安装配置文件。
有人告诉我，我应该在iPCU中添加一个p12文件/证书作为'Credential'，然后从MDM视图中的列表中选择它。但是我没有成功。是否有任何p12文件/证书有用？
感谢有人的帮助。
Someone tell me I should first do configure SCEP using IPCU,so I set a SCEP sever in Windows sever 2008.Then set the URL in the SCEP payload. but I can't install the Configuration Profile with MDM Payload.And someone tell me I should add in a p12 file/certificate as a 'Credential' in iPCU and pick this from the list in the MDM view.But I don't success. Is any a p12 file/certificate useful ?Thank someone for the help.
我需要下一步的答案。
谢谢！
推荐答案
如果您正在使用自签名ssl，那么在服务器端生成自签名ssl证书时，生成identity.p12证书和此证书需要在IPCU的身份部分。
If you are using self-signed ssl then,While generating self-signed ssl certificate in server side,generate identity.p12 certificate and this certificate you need to use in identity section of IPCU.
您可以使用这几行来生成idendtity.p12
These few lines you can use to generate the idendtity.p12
//Creating the device Identity key and certificate request
openssl genrsa 2048 > identity.key
openssl req -new -key identity.key -out identity.csr
//Signing the identity key with the CA.
//Give it a passphrase. You'll need to include that in the IPCU profile.
openssl x509 -req -days 365 -in identity.csr -CA cacert.crt -CAkey cakey.key -CAcreateserial -out identity.crt
openssl pkcs12 -export -out identity.p12 -inkey identity.key -in identity.crt -certfile cacert.crt
这篇关于如何设置MDM Payload的“身份”在iPCU？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！