IOS: mobile device management

Question

I got a little confused in MDM, I wish someone helped me here. I have studied the documents from the Apple website regarding iOS MDM, but still I feel puzzled, I have some questions.

• If the MDM server binds APNS every time it needs to run a command?
• It is very difficult to configure our own MDM server and how to configure our own MDM server?

Thanks in advance.

Answer 1

1) the general idea is that you send one request via APNS, and then respond with a command when the device is "home" to your MDM server. As soon as the device responds to your command, you can send another command in response, and so on, until the device executes all the commands to which your server should respond with an empty HTTP response.

2) It completely depends on your definition of the complex! Last year, I created 2 MDM servers, and this is not impossible, but rather difficult.

Answer 2

The MDM server only communicates when it needs to send a command to the device. Here's how to do it,

• The MDM server communicates with the APNS server with the MDM payload.
• The APNS server starts waking up on the device to verify the server for the MDM command.
• The mobile device contacts the MDM server to execute the command.

Implementing MDM is easy if you have a corporate account.

• Obtain an MDM certificate. http://www.blueboxmoon.com/wordpress/?p=877

• Using IPCU, create a profile and click it on your mobile.

• In this case, the push magic device will be transferred to the verification URL specified in the configuration profile.
• Then activate the mdm payload using JAVAPNS with a push mask and token. JavaPNS - https://code.google.com/p/javapns/
• Create a simple page that will respond to a device command. See your Blackhat manual for complete documentation. https://media.blackhat.com/bh-us-11/Schuetz/BH_US_11_Schuetz_InsideAppleMDM_WP.pdf or http://darthnull.org/media/papers/MDM_CommandReference.pdf for a link to the teams.