Apple MDM Vendor CSR Signing

java iphone ios mdm
CrimsonWorks picture CrimsonWorks · Dec 14, 2011 · Viewed 12.3k times · Source

I hit 'Invalid Certificate Signing Request' when uploading plist to https://identity.apple.com/pushcert/ , and below are steps I used to generate plist :

  1. As a vendor, create vendor CSR using KeyChain Access of the MacBook to upload to member centre to generate MDM signing certificate, and export private key from KeyChain Access in p12 format, say vendor.p12
  2. Create customer CSR, using Openssl :
    - openssl genrsa -des3 -out customerPrivateKey.pem 2048
    - openssl req -new -key customerPrivateKey.pem -out customer.csr
  3. As a vendor, download MDM signing certificate, WWDR intermediate certificate from provisioning portal, and download Apple root certificate from http://www.apple.com/appleca/AppleIncRootCertificate.cer, then use below command to convert these three certs to PEM format one by one which will be read by program as the PushCertCertificateChain :
    - openssl x509 -inform der -in AppleWWDRCA.cer -out chain.pem
  4. As a vendor, following sample java code in Mobile Device Management Protocol Reference, I sign the customer.csr with the private key extracted from vendor.p12
  5. Using Safari to upload generated plist to https://identity.apple.com/pushcert/ with customer Apple ID

Is there anything wrong with above steps? Please advise. Thanks a lot!

Answer

Softhinker.com picture Softhinker.com · Dec 19, 2011

Please see detailed steps and source code here to generate plist.

Related questions

adding multiple entries to a HashMap at once in one statement

I need to initialize a constant HashMap and would like to do it in one line statement. Avoiding sth like this: hashMap.put("One", new Integer(1)); // adding value into HashMap hashMap.put("Two", new Integer(2)); hashMap.put("Three", new Integer(3)); …

Read More
Can we run Java applications on iPhone?

Can we run or develop apps for iPhone in Java? Have a look to these links and answer: http://www.iphonefaq.org/archives/9731 http://www.j2mepolish.org/cms/leftsection/documentation/platforms/iphone.html http://www.ibm.com/developerworks/opensource/…

Read More
Understanding the Etc/GMT time zone

What is the rationale behind Apple using Etc/GMT timezone when they return the receipt from the App Store for auto-renewable subscriptions. What exactly is the Etc/GMT time zone? Does the Java SDK understand this time zone? Or do …

Read More