How to download the NFC certificate? - ios

Does anyone know how to download the NFC certificate from an Apple developer account?, I requested the NFC pass several times on NFC certificate portal , but no response from apple NFC Certificate request . I intend to set up the Apple Wallet Pass for NFC. 
I tried several times to request an NFC certificate.i have to configure the NFC certificate with backend.

Related

Apple Push Certificates Expiration

Today I got an email from appleid#id.apple.com saying that our Apple Push Service Certificate is about to expire.
I haven't seen any email from Apple like this. Wanted to see if it is legit?
Dear ***,
The following Apple Push Notification Service certificate, created for
AppleID [email address] will expire on April 11, 2018. Revoking or
allowing this certificate to expire will require existing devices to
be re-enrolled with a new push certificate.
Mobile Device Management - null
Please contact your vendor to generate a new request (a signed CSR),
then visit https://identity.apple.com/pushcert to renew your Apple
Push Notification Service certificate.
Thank You,
Apple Push Notification Service
I received this email as well and our application does not support APNS so it must be a phishing attempt.
Visit https://developer.apple.com/account/ and tap Certificates, IDs & Profiles and you will see which certificates need your attention.

iOS: APN auth Key for free developer account

Do we need to enroll in the Apple Developer Program ($99) to get the APN auth key and certificate? I needed it to learn FireBase Cloud Messaging which asks for the APN certificate/auth-key to be uploaded. This is how my developer account looks like.
Also, is there any other way I can generate a token for sending messages to FCM
To configure Firebase for Push Notifications you need APNs certificate.
To unlock push notifications capability you need to enroll into the Apple Developer program (after that you will get access to Certificates, IDs & Profiles section of your developer account).
PS: AppCoda: Implementing Push Notifications on iOS with Firebase

Implement an MDM server

I'm trying to implement a server side solution to remotely control permissions in and iOS device, on demand.
From what I've read it is possible using the MDM protocol and MDM push notifications, which allow my server to remotely change restrictions in an iOS device, for instance, or even lock the device, on demand.
I know that the iOS device must install an MDM configuration profile to be able to be remotely managed. I also know that the server must have an APNS certificate with MDM permissions.
My question is: do I have to be an MDM vendor and/or join the Apple Developer Enterprise Program in order to generate the APNS certificate with MDM permissions ?
Thanks in advance.
Yes, you need to have a company developer account registered with a DUNS number before you can be accepted into the MDM program.
You need to have Apple Developer Enterprise Program if you want implement MDM server by yourself. There is no need of Developer enterprise program to generate APNS certificate. You can generate APNS certificate from any apple id.
I don't believe you have to do anything to write your own personal MDM server except register for and receive an APNS certificate and follow the protocols.
If you want to sell your server and have it authorized by Apple, then you need to register obviously. I would certainly not buy one which wasn't.
You need an APNS (Apple Push Notification Service) certificate in order to connect to the APNS Servers to have your MDM server work. You use the certificate to validate who you are before you are allowed to send Push Notification messages. This requires an Apple Id.
Your MDM server also needs to be running on an TLS secured server and you use that certificate to sign the MDM profile you install on a device which you want to manage.
Yes, you will need Apple Developer Enterprise Account. Only Apple Account will not work. Contact Apple Support and ask them to provide you MDM Vendor rights.
In order to send MDM commands you will require Push Certificate Signed by MDM Vendor certificate.
This MDM Vendor tutorial will help you.

Apple OTA and MDM enrollment via web header

I'm trying to setup a basic mdm server. Until now I configured the devices using a usb cable, but now I'd like to try an OTA installation of the mdm profile. I found some instructions here: https://developer.apple.com/library/ios/documentation/NetworkingInternet/Conceptual/iPhoneOTAConfiguration/iPhoneOTAConfiguration.pdf
What I would like to know is if there is some way to skip step 2, that is avoiding using SCEP during the enrollment (since this is just for testing, the idea would be to insert step two later).
The closest answer I could get was this: Enrollment Challenge to retrieve UDID from iPhone
but it isn't clear in the comments wheter the SCEP step can be avoided altogheter.
Apparently, for what I was trying to do it was enough to send out the response to the enrollment with Content-type: application/x-apple-aspen-config header set and the profile in the body of the response. The profile then just installs itself on the device, enabling mdm if configured accordingly.

How to be a MDM Vendor for iOS

Did a lot of research on this. Saw several opinions, few say I need a Apple Enterprise account, few say I don't.
Having a MAC server would help? Do I need to have an enterprise account to be a MDM vendor. Any pointers would be great.
I saw the technical business document provided by MDM, but it was not explaining anything about the internal implementation of the server.
Any help would be great!
To become an MDM vendor, you need:
1) An Apple Enterprise account
2) Contact Apple (https://developer.apple.com/contact/submit.php) and ask to be an MDM vendor.
They should enable you as an MDM vendor and you will have a "Other" tab in your "Certificates" section to send a Cert. Signing Request for MDM purposes.
You do need an enterprise account, but I'm not sure whether you need to specifically request to be a vendor also. You don't need a Mac server.
As for the details of your request - are you talking about signing your 'customers' certificate signing request which is a required step now in order to be a vendor or actually setting up and running an MDM service?
After research, we need to have a Enterprise Developer account from Apple, and we need to send MDM payload, from the web server, using Apple's push notification server.

Resources