Question

I have used the iOS development account for creating APNS SSL certificate for sending the push notification to an iOS device for development purpose. I can get the device token using objective c sample code in iOS device.Then I can use that device token to send push notification for that specific iOS device.

Now I am going to implement MDM and for MDM iOS Enterprise account is required. There are some questions, which I want to confirm if someone has already done.

1. So I want to know can I use iOS Enterprise account for creating “apns ssl certificate” for development purpose?

2. Can I get device token for an iOS device using the same objective C sample code, so that I can send the push notification via APNS to that specific iOS device for testing purpose?

Answer 1

First of all MDM push notification implementation is different than push notification for third party iOS application.

1)You have to use iOS Enterprise account for MDM push notification and there are few steps to get APNS certificate.
1.Refer MDM_Protocol and follow this link: http://www.softhinker.com/in-the-news/iosmdmvendorcsrsigning Then verify few things.

remove the passphrase from customerPrivateKey.pem using this command

openssl rsa -in customerPrivateKey.pem -out PlainKey.pem

Then merge your APNS certificate (for example CustomerCompanyName.pem) downloaded from the portal https://identity.apple.com/pushcert/ using this command

cat CustomerCompanyName.pem PlainKey.pem > PlainCert.pem

Now this PlainCert.pem file can be used in your server as APNS/MDM certificate.

2)In MDM push notification there are three keys

• PushMagic – a unique token the MDM server sends with each push request

• Token – a unique token that identifies the device to the APNS service

• UnlockToken – an escrow key used to clear the passcode on the device.

MDM push notification payload is also different than push notification payload.It should look like this:

{“aps”:{},”mdm”:PushMagic}