Remove MDM profile & Bypass MDM Activation Screen. IActivate software was designed to bypass - remove MDM (Mobile Device Management) Configuration Profile on any iPhone, iPad, iPod Touch (WIFI or GSM). Xda-developers Google Nexus 5 Nexus 5 General HOW-TO Bypass Airwatch MDM / Use Root Temporarily by fintheman XDA Developers was founded by developers, for developers. It is now a valuable resource for people who want to make the most of their mobile devices, from customizing the look and feel to adding new functionality.
MDM Service Tools V1.0
Martech Team is proud to present new application designed for servicing internet modems. Major functions: - Unlock supported for Huawei E156, Huawei E156G, Huawei E160, Huawei E160G, Huawei E166, Huawei E169 Huawei E169G, Huawei E170, Huawei E172, Huawei E176, Huawei E180, Huawei E196 Huawei E270, Huawei E271, Huawei E272, Huawei E612, Huawei E618, Huawei E620 Huawei E630, Huawei E630+, Huawei E660, Huawei E660A, Huawei E800, Huawei E870 Huawei EG162, Huawei EG162G, Huawei EG602, Huawei EG602G, Vodafone K2540, Vodafone K3515, Vodafone K3520, Vodafone K3565, Vodafone K3715 (totally 33 models) - reading out simlock state for above models Unlock of these models is totally free! You don't need to have any account with logs or other credits. Once activated you can use it unlimited. Recommended price is 39 euro. This offer is for Martech BOX II Plus / Lite & Martech CLIP OWNERS ONLY! Download link: http://martech.pl/download/MDM/MDM_V1_0.zip Be READY ! For next update :-) Martech Team
So I set up the SCEP server to generate an iOS identity certificate which is only valid for a short time. When it expires the profile says 'This profile has expired. Update this profile for a newer version', and presents an 'Update Profile' button.
However clicking this button simply tells me 'Profile could not be updated. Please contact your networks Administrator'. No attempt is made to contact either the MDM service or the SCEP service, and no indication of any MDM activity or errors appear in the log.
Enrolling the device again works fine, so I don't suspect calling a network administrator is actually a solution. So how do you update an expired MDM profile?
Mikkel LøkkeMikkel Løkke
2 Answers
I worked with MDM more than a year ago. So, I could be wrong with some details.
Here is what I remember:
a) Device does two SCEP calls for OTA MDM.
Look at this diagram
First SCEP call is done as part of OTA Certificate Enrollment (phase 2 on the diagram)
And second SCEP call is done when OTA delivers profile with MDM and SCEP payload (as phase 3 on the diagram).
One thing which isn't not obvious from your question which of iOS identify certificate is short living.
b) If your MDM identity has expired, you will stop receiving all MDM commands.
c) If you OTA identity has expired, you can't upgrade any of configurations wich your delivered over the air (as example MDM).
If you have access to Apple Enterprise Developer Program, you can find MDM document in there. It will say that if you did OTA MDM, you need to Update it when it's about to expire.
And as I remember, if your OTA + MDM has expired then you are screwed (you don't have any other option than reenrollment).
BTW. I believe it's common practice to make these identities quite long living (exactly because of these problems).
If you are worried that you can't prevent somebody from receiving updates, you can always:
Victor RoninVictor Ronin
I have problems with profile update close to certificate expiration on iOS 6.1.3, but on iOS 7 everything works fine.After certificarte expiration date come under 14 days, profile update button appears on the MDM profile. The status of the profile is always 'Profile is expired', so Apple documentation is not correct, status is never 'about to expire'.On iOS 7 I can update the profile, it actually does the new enrollment automatically.On iOS 6.1.3, there is always error 'Profile could not be updated. Please contact your networks Administrator', and there is no trace of any network activity from the device.
Any idea?
Thanks,
Ratko
Ratko StibricRatko Stibric
![]() Not the answer you're looking for? Browse other questions tagged iosmdm or ask your own question.Comments are closed.
|
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |