Business and Enterprise

RSS for tag

Design great apps that support companies and organizations of all sizes.

Posts under Business and Enterprise tag

185 Posts

Post

Replies

Boosts

Views

Activity

Yet Another Possibly ****** Question -- check to see if a specific root CA is installed
I can use /usr/bin/security to install a root CA, and to delete it (based on the file)... but how do I check to see if it's installed already? Surely there is a way to do this, other than security find-certificate -a | fgrep my.ca.name? Ideally from the shell level, but if I have to write a program I can (in which case I believe it'd be a relatively easy, albeit annoying because I hate writing certificate code, task)...
2
0
830
Apr ’22
How to download Apple Enterprise developer account Invoice
Hello guys, I was having trouble with my mailbox so I couldn't download the invoice for the Apple Enterprise developer account. I did some research and come to know that I can download it from the following link https://store.apple.com/de/order/list which I tried but after redirecting to the link it shows list of the orders i have placed and after clicking on "Apple Developer Enterprise Program - Membership for one year" It shows error Something went wrong. There was an error with your request. Please try again. Kindly guide me to the working or correct way to download the invoice Thanks
0
0
976
Apr ’22
Safari Extension for organization not available in any location
Hello, we successfully uploaded a safari extension to the app store which was approved and shows ready for sale. We want it to be private, only for our organization and we selected the organization in the Pricing and Availability section. We also selected all countries and regions. We tried to download the extension from several locations: Bulgaria, Us, China but on all of them we are getting "App Not Available in your country or region." Could you please help on what we are missing? Thanks
0
0
1.1k
Apr ’22
App is not approving
I am using calculator to hide functionality of application, But apple review team is not approving that with the reason 2.3.1 Performance: Accurate Metadata. When I checked app store there is multiple apps available which are using calculator hide data. If app store terms and condition does not allow this, Then why are there so many apps available? Please suggest me the way
1
0
724
Mar ’22
DeviceCheck for Enterprise Account
Hi, I'm trying to validate device token generated on app which is signed by Enterprise account. I generate deviceToken on device I send the token to our backend Our backend creates JWT token The backend calls validate_device_token endpoint and receives 401 The authentication token can't be verified I've seen many implementations on the internet and I'm pretty sure that we generate the token in correct way. (eg implementation: https://github.com/marinosoftware/DeviceCheckSample) The Questions are: Is it possible to use DeviceCheck on Enterprise Account ? There is no possibility to enable DeviceCheck on Enterprise account is APNs key configuration: https://developer.apple.com/account/resources/authkeys/list. Is this configuration required ? Is there is a way to validate signature of JWT token locally ? Services such as https://jwt.io requires Public and Private keys in correct format, I didn't find a way to validate the signature signed by p8 certificate without any additional keys.
1
0
1.4k
Mar ’22
Getting started with MDM as a software provider
The main question I have, honestly, is how do I do that? Or what do I do? The goal, of course, is to allow IT to deploy our product to macs. Our product has a network system extension, and the ability to install without asking user permission is very attractive. But... I'm not sure how to get started! My software-trained mind thinks that I should be able to write up my own provisioning file, but then I read the specifications and the part of my mind that keeps me from doing too many stupid things starts kicking the other part below the table. Is there a good resource for this from a developer's perspective? A tool that can create sample files for me, or documentation that can tell me what files and information I need to provide to someone using, say, JAMF?
1
0
876
Feb ’22
Enterprise account enrollment
Hi, We have been trying to get an Apple Enterprise Account for distributing an Proprietary Enterprise app internally within organisation. But apple is asking us to take normal developer account for some reason. We have been trying to reach out to apple to understand the reason and explain the situation further and we have been given casea id 101631831475, 101588200013 but no replies are being sent to us from apple to any communicaiton. And there is no way to call apple either. This is causing a huge delay in our enterprise mobility roadmap. Can someone please Help?
0
0
840
Feb ’22
Apple Device MDM enrolment fails if client certificate is requested during SSL Handshake
FB9895426 (Apple Device MDM enrolment fails if client certificate is requested during SSL Handshake) Device enrolment fails in an MDM Server configured with client certificate authentication. Upon investigating the issue, we noticed that the device drops the SSL handshake if a client certificate is requested during the handshake. Wireshark Screenshot: From the console logs, we noticed the below error: <MCHTTPRequestor: 0x283b560a0> cannot accept the authentication method NSURLAuthenticationMethodClientCertificate The TLS protocol states that "If no suitable certificate is available, the client SHOULD send a certificate message containing no certificates.". Thus, we expect the MDM client to respond with a "no certificate" response during the SSL handshake. Someone has already raised the same question but there's no reply yet: https://developer.apple.com/forums/thread/680328 https://developer.apple.com/forums/thread/676579 Any help would be appreciated. Thanks in advance.
0
1
1k
Feb ’22
iOS MDM Home Screen Layout Command. Move system applications to new page after specified home page apps
Hello, I have a working install Home Screen Layout command for a DEP device via an MDM service I work on. The issue is with the system applications. I thought that by specifying a Home Screen Layout via a plist all system applications would appear in alphabetical order on a page / pages beginning after the applications specified for the home screen layout. Instead they appear to fill in gaps in the Home Screen Layout, defeating the point of specifying a layout. Is there a way to configure the system applications to behave in this way? I have attached my working plist (it goes through more formatting to complete the payload, but the content for applications and folders remains). I have also attached images of a device the plist has been applied to. My plist: <array> <dict> <key>Dock</key> <array> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.facebook.Facebook</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.google.b612</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.amazon.AmazonUK</string> </dict> <dict> <key>Type</key> <string>Folder</string> <key>DisplayName</key> <string>Example</string> <key>Pages</key> <array> <array> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.apple.News</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.becrypt.becrypt</string> </dict> </array> </array> </dict> </array> <key>Pages</key> <array> <array> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.apple.MobileSMS</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.mike-ferenduros.Chunky-Comic-Reader</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.argility.flashfigures</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.apple.camera</string> </dict> <dict> <key>Type</key> <string>Folder</string> <key>DisplayName</key> <string>Display Name example</string> <key>Pages</key> <array> <array> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.apple.podcasts</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.linkedin.LinkedIn</string> </dict> </array> </array> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.apple.AppStore</string> </dict> </array> <array> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.microsoft.Office.Outlook</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.apple.Bridge</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.dy.app</string> </dict> </array> <array> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.nhs.online</string> </dict> </array> </array> </dict> </array>
0
0
1.1k
Feb ’22
What should the mechanism to send new version in Apple Developer Enterprise Program
Hi, We have purchased an Apple developer enterprise account for our organization and shared the app download link with our employees. My question is, how to intimate our staff who already installed the app about the latest version of the app? As compared with the Apple store where their app updates/intimate automatically.
1
0
1.1k
Feb ’22
Using InstallerJS in MDM distributed package
Hi, We are creating a Installer package which will be distributed to user through MDM with the InstallApp command. Our distribution package use the Distribution.xml file and InstallerJS to check each flat package version and select the package for install only if there is no receipt or if the already installed package version is older. The package is working fine when using the GUI Installer or through the command line installer. When trying to install the package through MDM, all package which use InstallerJS javascript to decide if it will be install or not will not be selected and thus will not be installed. Is this the expected behaviour? Looking at the install log, I can see that the package selection seems to be done by appstored when installing through MDM. Is appstored not able to understand the InstallerJS script? The documentation specifies that InstallerJS is for the Installer application. https://developer.apple.com/documentation/installer_js If that's the case is there a way to select specific flat package for install when distributing through MDM? Thanks in advance!
2
1
2.1k
Feb ’22
Unable to get ABM prompt on freshly wiped Mac
I have a Mac Mini 2018 which is not presenting the ABM prompt when I bring my iPhone 12 running Apple Configuration Manager near it. This machine (which has been in use for a few years) has been wiped and has a fresh install of Monterey 12.2 on it. Upon first boot after a fresh reinstall, it goes directly to the "Select your Country or Region" screen (it completely skips the language selection prompt for some reason). I launched ACM on my iPhone 12 and sat it atop the Mac Mini for several minutes, but nothing happened. Is there something I am doing wrong? In case it matters (and knowing my luck, it probably does), I do have the T2 Security Utility configured for "Medium Security" and "Allow Booting from External Media" as I will need to roll back this machine to Catalina after the 30-day grace period completes.
0
0
1k
Feb ’22
section 2.20
Good morning, We are a startup offering restaurants and retail businesses with a commission free app to help them increase my sale. Can I publish all the apps under my apple developer account (most of them will have the same template) or I will need to publish every app separately in the client's apple developer account?
2
0
588
Jan ’22
Empty PushMagic string in TokenUpdate message
We recently noticed that, In the TokenUpdate message from a MDM enrolled device, the PushMagic value is empty. The response from device is: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>MessageType</key> <string>TokenUpdate</string> <key>PushMagic</key> <string></string> <key>Token</key> <string>[redacted]</string> <key>Topic</key> <string>[redacted]</string> <key>UDID</key> <string>[redacted]</string> </dict> </plist> This is a MacBookPro9,2 with OS version 10.8.5. We would like to understand whether this is an issue. Or how to handle this.
0
0
686
Jan ’22
EnterpriseCA SSL certificates are missing from MDM enrolled devices after OS update
We are experiencing issues on MDM enrolled devices where the SSL certificates are not trusted after the OS update. We use EnterpriseCA certificate in our server and pushed to devices during enrolment. But after OS update, the CA is missing from the ‘Certificate Trust settings’ in the device, but present under MDM profile. This make the devices to stop communicating with the server. For now we have manually installed the certificate on the devices and enabled full trust. But this involves user intervention and also end user can disable full trust anytime as the option is not greyed out, or remove the certificate from device. We would like to know if there is any other option to push the certificates without user intervention. And also the best practices to avoid this in future. Already we have seen this https://support.apple.com/en-in/HT212962 but it talks only about the Identity certificate. We would like to understand whether SSL certificates are also included in this.
0
0
994
Jan ’22
Apple Business Manager
We are a government organization. There is a need to distribute a custom app. So we are trying to register for Apple Business Manager. But enrollment is showing error that 'D-U-S-N' number is required. And on apple developer website it has written D-U-S-N number is optional for Government organization. How can we proceed without D-U-S-N Number?
Replies
1
Boosts
0
Views
1.7k
Activity
May ’22
Yet Another Possibly ****** Question -- check to see if a specific root CA is installed
I can use /usr/bin/security to install a root CA, and to delete it (based on the file)... but how do I check to see if it's installed already? Surely there is a way to do this, other than security find-certificate -a | fgrep my.ca.name? Ideally from the shell level, but if I have to write a program I can (in which case I believe it'd be a relatively easy, albeit annoying because I hate writing certificate code, task)...
Replies
2
Boosts
0
Views
830
Activity
Apr ’22
How to download Apple Enterprise developer account Invoice
Hello guys, I was having trouble with my mailbox so I couldn't download the invoice for the Apple Enterprise developer account. I did some research and come to know that I can download it from the following link https://store.apple.com/de/order/list which I tried but after redirecting to the link it shows list of the orders i have placed and after clicking on "Apple Developer Enterprise Program - Membership for one year" It shows error Something went wrong. There was an error with your request. Please try again. Kindly guide me to the working or correct way to download the invoice Thanks
Replies
0
Boosts
0
Views
976
Activity
Apr ’22
Safari Extension for organization not available in any location
Hello, we successfully uploaded a safari extension to the app store which was approved and shows ready for sale. We want it to be private, only for our organization and we selected the organization in the Pricing and Availability section. We also selected all countries and regions. We tried to download the extension from several locations: Bulgaria, Us, China but on all of them we are getting "App Not Available in your country or region." Could you please help on what we are missing? Thanks
Replies
0
Boosts
0
Views
1.1k
Activity
Apr ’22
App is not approving
I am using calculator to hide functionality of application, But apple review team is not approving that with the reason 2.3.1 Performance: Accurate Metadata. When I checked app store there is multiple apps available which are using calculator hide data. If app store terms and condition does not allow this, Then why are there so many apps available? Please suggest me the way
Replies
1
Boosts
0
Views
724
Activity
Mar ’22
DeviceCheck for Enterprise Account
Hi, I'm trying to validate device token generated on app which is signed by Enterprise account. I generate deviceToken on device I send the token to our backend Our backend creates JWT token The backend calls validate_device_token endpoint and receives 401 The authentication token can't be verified I've seen many implementations on the internet and I'm pretty sure that we generate the token in correct way. (eg implementation: https://github.com/marinosoftware/DeviceCheckSample) The Questions are: Is it possible to use DeviceCheck on Enterprise Account ? There is no possibility to enable DeviceCheck on Enterprise account is APNs key configuration: https://developer.apple.com/account/resources/authkeys/list. Is this configuration required ? Is there is a way to validate signature of JWT token locally ? Services such as https://jwt.io requires Public and Private keys in correct format, I didn't find a way to validate the signature signed by p8 certificate without any additional keys.
Replies
1
Boosts
0
Views
1.4k
Activity
Mar ’22
Getting started with MDM as a software provider
The main question I have, honestly, is how do I do that? Or what do I do? The goal, of course, is to allow IT to deploy our product to macs. Our product has a network system extension, and the ability to install without asking user permission is very attractive. But... I'm not sure how to get started! My software-trained mind thinks that I should be able to write up my own provisioning file, but then I read the specifications and the part of my mind that keeps me from doing too many stupid things starts kicking the other part below the table. Is there a good resource for this from a developer's perspective? A tool that can create sample files for me, or documentation that can tell me what files and information I need to provide to someone using, say, JAMF?
Replies
1
Boosts
0
Views
876
Activity
Feb ’22
Enterprise account enrollment
Hi, We have been trying to get an Apple Enterprise Account for distributing an Proprietary Enterprise app internally within organisation. But apple is asking us to take normal developer account for some reason. We have been trying to reach out to apple to understand the reason and explain the situation further and we have been given casea id 101631831475, 101588200013 but no replies are being sent to us from apple to any communicaiton. And there is no way to call apple either. This is causing a huge delay in our enterprise mobility roadmap. Can someone please Help?
Replies
0
Boosts
0
Views
840
Activity
Feb ’22
Apple Device MDM enrolment fails if client certificate is requested during SSL Handshake
FB9895426 (Apple Device MDM enrolment fails if client certificate is requested during SSL Handshake) Device enrolment fails in an MDM Server configured with client certificate authentication. Upon investigating the issue, we noticed that the device drops the SSL handshake if a client certificate is requested during the handshake. Wireshark Screenshot: From the console logs, we noticed the below error: <MCHTTPRequestor: 0x283b560a0> cannot accept the authentication method NSURLAuthenticationMethodClientCertificate The TLS protocol states that "If no suitable certificate is available, the client SHOULD send a certificate message containing no certificates.". Thus, we expect the MDM client to respond with a "no certificate" response during the SSL handshake. Someone has already raised the same question but there's no reply yet: https://developer.apple.com/forums/thread/680328 https://developer.apple.com/forums/thread/676579 Any help would be appreciated. Thanks in advance.
Replies
0
Boosts
1
Views
1k
Activity
Feb ’22
iOS MDM Home Screen Layout Command. Move system applications to new page after specified home page apps
Hello, I have a working install Home Screen Layout command for a DEP device via an MDM service I work on. The issue is with the system applications. I thought that by specifying a Home Screen Layout via a plist all system applications would appear in alphabetical order on a page / pages beginning after the applications specified for the home screen layout. Instead they appear to fill in gaps in the Home Screen Layout, defeating the point of specifying a layout. Is there a way to configure the system applications to behave in this way? I have attached my working plist (it goes through more formatting to complete the payload, but the content for applications and folders remains). I have also attached images of a device the plist has been applied to. My plist: <array> <dict> <key>Dock</key> <array> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.facebook.Facebook</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.google.b612</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.amazon.AmazonUK</string> </dict> <dict> <key>Type</key> <string>Folder</string> <key>DisplayName</key> <string>Example</string> <key>Pages</key> <array> <array> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.apple.News</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.becrypt.becrypt</string> </dict> </array> </array> </dict> </array> <key>Pages</key> <array> <array> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.apple.MobileSMS</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.mike-ferenduros.Chunky-Comic-Reader</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.argility.flashfigures</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.apple.camera</string> </dict> <dict> <key>Type</key> <string>Folder</string> <key>DisplayName</key> <string>Display Name example</string> <key>Pages</key> <array> <array> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.apple.podcasts</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.linkedin.LinkedIn</string> </dict> </array> </array> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.apple.AppStore</string> </dict> </array> <array> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.microsoft.Office.Outlook</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.apple.Bridge</string> </dict> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.dy.app</string> </dict> </array> <array> <dict> <key>Type</key> <string>Application</string> <key>BundleID</key> <string>com.nhs.online</string> </dict> </array> </array> </dict> </array>
Replies
0
Boosts
0
Views
1.1k
Activity
Feb ’22
What should the mechanism to send new version in Apple Developer Enterprise Program
Hi, We have purchased an Apple developer enterprise account for our organization and shared the app download link with our employees. My question is, how to intimate our staff who already installed the app about the latest version of the app? As compared with the Apple store where their app updates/intimate automatically.
Replies
1
Boosts
0
Views
1.1k
Activity
Feb ’22
Using InstallerJS in MDM distributed package
Hi, We are creating a Installer package which will be distributed to user through MDM with the InstallApp command. Our distribution package use the Distribution.xml file and InstallerJS to check each flat package version and select the package for install only if there is no receipt or if the already installed package version is older. The package is working fine when using the GUI Installer or through the command line installer. When trying to install the package through MDM, all package which use InstallerJS javascript to decide if it will be install or not will not be selected and thus will not be installed. Is this the expected behaviour? Looking at the install log, I can see that the package selection seems to be done by appstored when installing through MDM. Is appstored not able to understand the InstallerJS script? The documentation specifies that InstallerJS is for the Installer application. https://developer.apple.com/documentation/installer_js If that's the case is there a way to select specific flat package for install when distributing through MDM? Thanks in advance!
Replies
2
Boosts
1
Views
2.1k
Activity
Feb ’22
Unable to get ABM prompt on freshly wiped Mac
I have a Mac Mini 2018 which is not presenting the ABM prompt when I bring my iPhone 12 running Apple Configuration Manager near it. This machine (which has been in use for a few years) has been wiped and has a fresh install of Monterey 12.2 on it. Upon first boot after a fresh reinstall, it goes directly to the "Select your Country or Region" screen (it completely skips the language selection prompt for some reason). I launched ACM on my iPhone 12 and sat it atop the Mac Mini for several minutes, but nothing happened. Is there something I am doing wrong? In case it matters (and knowing my luck, it probably does), I do have the T2 Security Utility configured for "Medium Security" and "Allow Booting from External Media" as I will need to roll back this machine to Catalina after the 30-day grace period completes.
Replies
0
Boosts
0
Views
1k
Activity
Feb ’22
section 2.20
Good morning, We are a startup offering restaurants and retail businesses with a commission free app to help them increase my sale. Can I publish all the apps under my apple developer account (most of them will have the same template) or I will need to publish every app separately in the client's apple developer account?
Replies
2
Boosts
0
Views
588
Activity
Jan ’22
Empty PushMagic string in TokenUpdate message
We recently noticed that, In the TokenUpdate message from a MDM enrolled device, the PushMagic value is empty. The response from device is: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>MessageType</key> <string>TokenUpdate</string> <key>PushMagic</key> <string></string> <key>Token</key> <string>[redacted]</string> <key>Topic</key> <string>[redacted]</string> <key>UDID</key> <string>[redacted]</string> </dict> </plist> This is a MacBookPro9,2 with OS version 10.8.5. We would like to understand whether this is an issue. Or how to handle this.
Replies
0
Boosts
0
Views
686
Activity
Jan ’22
EnterpriseCA SSL certificates are missing from MDM enrolled devices after OS update
We are experiencing issues on MDM enrolled devices where the SSL certificates are not trusted after the OS update. We use EnterpriseCA certificate in our server and pushed to devices during enrolment. But after OS update, the CA is missing from the ‘Certificate Trust settings’ in the device, but present under MDM profile. This make the devices to stop communicating with the server. For now we have manually installed the certificate on the devices and enabled full trust. But this involves user intervention and also end user can disable full trust anytime as the option is not greyed out, or remove the certificate from device. We would like to know if there is any other option to push the certificates without user intervention. And also the best practices to avoid this in future. Already we have seen this https://support.apple.com/en-in/HT212962 but it talks only about the Identity certificate. We would like to understand whether SSL certificates are also included in this.
Replies
0
Boosts
0
Views
994
Activity
Jan ’22