ogb912/micromdm
1
0
Fork 0
mirror of https://github.com/micromdm/micromdm/ synced 2026-08-06 01:06:26 +08:00
Code Issues Packages Projects Releases Wiki Activity

clarify mdmcert.download instructions (#819)

Browse Source
This commit is contained in:
Brandon Kurtz
2022-05-20 10:07:17 -07:00
committed by GitHub
parent 50fb48b7f3
commit ddb6fa46b3
1 changed files with 35 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
docs/user-guide/quickstart.md
View File

@@ -70,12 +70,44 @@ To communicate with your device fleet, MDM needs an APNS certificate issued by A
Apple has a separate flow for the MDM vendor than the one for customers. For an in-house deployment without third parties, you must complete both the vendor and the customer process yourself. The `mdmctl mdmcert` command will help you with your APNS certificate needs.
<details>
<summary><b>For testing and development scenarios only</b>, you can potentially obtain a push certificate from <a href="https://mdmcert.download/">https://mdmcert.download/</a>. Expand this section for more info.</summary>
See [https://mdmcert.download/about](https://mdmcert.download/about) for more info and <b>disclaimers</b> about this option. Skip to [Generate MDM CSR](#generate-mdm-csr) if this does not apply to your situation.
### mdmcert.download
1. [Register for an mdmcert.download account](https://mdmcert.download/registration)
1. Submit a CSR to mdmcert.download's API
`mdmctl mdmcert.download -new -email=THE_EMAIL_YOU_REGISTERED_WITH@acme.com`
1. If successful, you should get this response from mdmcert.download
```
Request successfully sent to mdmcert.download. Your CSR should now
be signed. Check your email for next steps. Then use the -decrypt option
to extract the CSR request which will then be uploaded to Apple.
```
1. Download the encrypted CSR from your email.
1. Decrypt your CSR.
`mdmctl mdmcert.download decrypt=~/mdm_signed_request.20171122_094910_220.plist.b64.p7`
1. Sign into [identity.apple.com](identity.apple.com) with your Apple ID. This Apple ID will likely match the domain that you signed up to mdmcert.download with and the domain where you intend to host your MDM server.
1. Download your push cert 🎉
You now have a push cert from mdmcert.download. You do not have to proceed with [Generate MDM CSR](#generate-mdm-csr) below. Continue with [Upload your push certificate](#upload-your-push-certificate).
</details>
### Generate MDM CSR
Create a request for the MDM CSR, with a password used to encrypt the private key.
After this step you will have a new `mdm-certificates` directory, with the necessary files.
```
mdmctl mdmcert vendor -password=secret -country=US -email=admin@acme.co
```
### Generate MDM CSR
Log in to the Apple Developer Portal (https://developer.apple.com/account), and navigate to the Certificates, IDs & Profiles section (https://developer.apple.com/account/resources/certificates/list).
1. Click the plus symbol (+) next to *Certificates*
2. Select *MDM CSR* under the *Services* section, click *Continue*
@@ -99,6 +131,8 @@ If you're getting certificates for multiple environments (staging, production) o
If you've uploaded the plist, you will be offered a certificate, which is signed for the `mdm-certificates/PushCertificatePrivateKey.key` key. Copy the certificate to the same directory.
# Upload your push certificate
Finally, upload the certificate to MicroMDM.
```