5 ms·

A few of us are working on a open source alternative to Mobile Device Management vendors. https://github.com/micromdm https://github.com/micromdm https://micro

A few of us are working on a open source alternative to Mobile Device Management vendors. https://github.com/micromdm https://github.com/micromdm https://micromdm.io/community/ https://micromdm.io/community/ Also, Apple has finally released the protocol, which previously was behind the Enterprise Developer portal. https://developer.apple.com/library/content/documentation/Miscellaneous/Reference/MobileDeviceManagementProtocolRef/3-MDM_Protocol/MDM_Protocol.html https://developer.apple.com/library/content/documentation/Mi...

walterbell 10y ago
Great news about the release of MDM docs. Will this also support iOS, e.g. per-app VPN profiles, VPN certs?
- zalmoxes 10y ago
  Not all, but most MDM Commands in the spec are already supported. You can see all the supported commands you can issue to devices here https://github.com/micromdm/mdm/blob/master/command.go#L233 https://github.com/micromdm/mdm/blob/master/command.go#L233 There's a lot of work that needs to be done for micromdm to be a usable replacement in the enterprise though. Right now it's still a experiment -- the focus(at least for me) is to try to create a tool which is extensible(API driven) and one that will be acceptable in environments where people today use configuration management everyday.
  - walterbell 10y ago
    Since that list can deliver profiles, could Apple Configurator be used to create the profile, then deliver them with the MDM tool? I recall that registration was needed for Apple's servers to push profiles to managed devices. How would that work with an OSS MDM? Does the MDM need a certificate from Apple?
    - zalmoxes 10y ago
      You need to be an enterprise Dev and get a special APNS cert from apple. (It only costs $300/year, which any company should afford). MDM certs are still a pain, and it's hard to get involved with the project if you don't have one. Luckily, if you install Server.app from the App store and enables Device management, Apple issues you a push cert you can use. You just have to export it from Keychain access as a .p12 file.
      - zalmoxes 10y ago
        Someone is also working on an alternative to Apple Configurator(which is already nicer than the original) https://github.com/erikberglund/ProfileCreator https://github.com/erikberglund/ProfileCreator
        walterbell 10y ago
        Thanks for the pointers, this was not discoverable from web searching.

walterbell 10y ago

Great news about the release of MDM docs. Will this also support iOS, e.g. per-app VPN profiles, VPN certs?

zalmoxes 10y ago
Not all, but most MDM Commands in the spec are already supported. You can see all the supported commands you can issue to devices here https://github.com/micromdm/mdm/blob/master/command.go#L233 https://github.com/micromdm/mdm/blob/master/command.go#L233 There's a lot of work that needs to be done for micromdm to be a usable replacement in the enterprise though. Right now it's still a experiment -- the focus(at least for me) is to try to create a tool which is extensible(API driven) and one that will be acceptable in environments where people today use configuration management everyday.
- walterbell 10y ago
  Since that list can deliver profiles, could Apple Configurator be used to create the profile, then deliver them with the MDM tool? I recall that registration was needed for Apple's servers to push profiles to managed devices. How would that work with an OSS MDM? Does the MDM need a certificate from Apple?
  - zalmoxes 10y ago
    You need to be an enterprise Dev and get a special APNS cert from apple. (It only costs $300/year, which any company should afford). MDM certs are still a pain, and it's hard to get involved with the project if you don't have one. Luckily, if you install Server.app from the App store and enables Device management, Apple issues you a push cert you can use. You just have to export it from Keychain access as a .p12 file.
    - zalmoxes 10y ago
      Someone is also working on an alternative to Apple Configurator(which is already nicer than the original) https://github.com/erikberglund/ProfileCreator https://github.com/erikberglund/ProfileCreator
      - walterbell 10y ago
        Thanks for the pointers, this was not discoverable from web searching.