my IOS version is 9.0, Now i want to get the unique value of the Device, i think of using IMEI, but i did some tests, i always cannot get the IMEI of the device,could you tell me other ways to know unique value of the device?

I got a client request to build a parental control app like Parentkit(https://parentkit.co/) or Ourpact (http://ourpact.com/) to help parents manage their children devices. After doing some research online, I figured that it could be a MDM feature and requires an apple enterprise account for implementation. However, Apple developer program support does not allow me to create an enterprise account for developing a MDM system for non-company members. They also said that any non-company use of MDM is not allowed by Apple. If what they said is true, MDM implementation should not be allowed in the abovementioned parental control apps. Would they be using other means without the need to register an enterprise account to archieve real-time, over-the-air control on device restriction? If that is the case, what else I should read and work on to build a parental control apps like those without registering an enterprise account?

I'm looking to play around with the Shared iPad feature for application testing. I see that the Profile Manager in in OS X Server 5.1 provides Support for Shared iPad. However I'm not seeing where that would be enabled, nor am I able to find any documentation detailing the configuration. I also tried using Apple Conifigurator, and I don't see a checkbox for "Enable Shared iPad" (see this thread). Has anyone gotten this working? Is this feature only something that is available if you are an educational customer (which this note seems to allude to)?

We have taken a new client using InTune. The previous tech used his appleID to generate the MDM push cert for InTune. That cert is going to expire and I cannot renew it because I don't have access to his appleID account, and the cert is attached to his appleID. Intune won't let me "renew" a cert from a different appleID so i have to create a new one, remove the old cert (which should force all apple devices connected to InTune to disocnnect from Intune), and apply the new cert. I then would have to re-attach all the apple devices to the InTune account. However, I have been told my Microsoft and other support pages that the expiring cert can have the appleId that it's attached to changed on the back end by apple. It would be best to have the ID on the old expiring cert changed form the old appleID to the new appleID that i created the new MDM cert from, so I don't have to do the whole song and dance described above. I need somebody from apple to help get that changed so we don't have to remove the apple devices in InTune for the new cert.Thank you

Dear Apple developer community,i am trying to successfully use the device to device migration feature which was introduced in iOS 12.4I am a developer for a mobile client management solution and we have the problem that we cannot use this feature when DEP devices are involed. As long as we use devices which are not included in the DEP program, we can directly migrate our data from one device to another.It doesn't matter if the source and target devices are supervised or not. (both devices iOS 13.1)We do not use the DEP profile setting "DeviceToDeviceMigration" to skip this setup step.We do not use the configuration profile restriction "allowProximitySetupToNewDevice" (default true)So in theory, there should be no problem using this feature.When i leave the DEP program with the target device, I can again use the feature.Is there anything we are missing or is this a bug in iOS 13.1?Greetings,Mike

The use case is enterprise Admin wants to enable/disable Safari Extension without user's involvement. Currently, the onus is on User to enable/disable the extension. In managed endpoint environment, the Admin needs control to enable certain extension silently/automatically (without user's involvement)

Dears, For BYOD devices, especially personal devices, what are the ways we can enroll the devices to ABM? We are looking for a way to do this which can be done by the users them self by using a website or app. Also to remove the device later from a console.

Hi, I want to ask is MDM push also not support legacy binary protocol as of November 2020? If not support, may I ask what the http2 header need to append for mdm push? Here is my header: {"apns-topic": 'com.apple.mgmt.External.xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxx',"apns-push-type": 'mdm'} The post url is: api.push.apple.com:443/3/device/@deviceToken The mdm payload : { 'mdm':'@pushMagic' } And I always receive the BadDeviceToken, is something I mistake? Thanks.

Hi, We have an MDM Solution which is Microsoft Intune and one of the requirement for iOS Enrollment is MDM Push Certificate. But it is already expired and the Apple ID account used for the certificate is no longer in the company. Hope someone can help us with this. Thanks!

Has anyone been able to test OS Update on macOS 11 (Intel) ? Status returned by MDM returns the very un-informative message "InstallFailed": <key>UpdateResults</key> <array> <dict> <key>InstallAction</key> <string>Error</string> <key>ProductKey</key> <string>MSU_UPDATE_20A5374i_patch_11.0</string> <key>Status</key> <string>InstallFailed</string> </dict> </array> And installer log on the device shows: 020-09-23 11:39:38+02 macmini SoftwareUpdateNotificationManager[828]: (null)：softwareupdated: Service connection invalidated! 2020-09-23 11:39:38+02 macmini softwareupdated[1145]: Removing client SUUpdateServiceClient pid=828, uid=501, installAuth=NO rights=(), transactions=0 (/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Versions/A/Resources/SoftwareUpdateNotificationManager.app/Contents/MacOS/SoftwareUpdateNotificationManager) 2020-09-23 11:39:38+02 macmini softwareupdated[1145]: Removing client SUUpdateServiceClient pid=828, uid=501, installAuth=NO rights=(), transactions=0 (/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Versions/A/Resources/SoftwareUpdateNotificationManager.app/Contents/MacOS/SoftwareUpdateNotificationManager) 2020-09-23 11:39:38+02 macmini softwareupdated[1145]: Fetched MajorOSInfo for productKey:001-36801; getIcon:NO; the SUMajorProduct was fetched remotely. 2020-09-23 11:39:39+02 macmini softwareupdated[1145]: Fetched MajorOSInfo for productKey:001-43966; getIcon:NO; the SUMajorProduct was fetched remotely. 2020-09-23 11:39:39+02 macmini softwareupdated[1145]: Fetched MajorOSInfo for productKey:041-91758; getIcon:NO; the SUMajorProduct was fetched remotely. 2020-09-23 11:39:39+02 macmini softwareupdated[1145]: Fetched MajorOSInfo for productKey:061-26589; getIcon:NO; the SUMajorProduct was fetched remotely. 2020-09-23 11:39:40+02 macmini softwareupdated[1145]: Fetched MajorOSInfo for productKey:061-94403; getIcon:NO; the SUMajorProduct was fetched remotely. 2020-09-23 11:39:40+02 macmini softwareupdated[1145]: SoftwareUpdate: request for status for unknown product MSU_UPDATE_20A5374i_patch_11.0 2020-09-23 11:39:40+02 macmini softwareupdated[1145]: SUOSUServiceDaemon: No agents found to execute MDM major OS command! 2020-09-23 11:39:40+02 macmini softwareupdated[1145]: SUOSUServiceDaemon: No active client to get update status 2020-09-23 11:39:43+02 macmini softwareupdated[1145]: SUOSUServiceDaemon: No agents found to execute MDM major OS command! 2020-09-23 11:40:02+02 macmini softwareupdated[1145]: SUOSUServiceDaemon: Connection invalidated! 2020-09-23 11:40:02+02 macmini softwareupdated[1145]: Removing client SUUpdateServiceClient pid=1124, uid=0, installAuth=NO rights=(), transactions=0 (/usr/libexec/mdmclient) after reboot, install log shows: % tail -f /private/var/log/install.log 2020-09-23 11:53:16+02 macmini softwareupdated[533]: MSU updates found: ( &#9;&#9;"<SUOSUProduct: MSU_UPDATE_20A5374i_patch_11.0>" ) 2020-09-23 11:53:16+02 macmini SoftwareUpdateNotificationManager[727]: Controller: Received availableUpdatesChanged notification; new updates: [MSU_UPDATE_20A5374i_patch_11.0]; new major updates: [001-43966, 001-36801, 061-94403, 061-26589, 041-91758] 2020-09-23 11:53:16+02 macmini softwareupdated[533]: SoftwareUpdate: request for status for unknown product MSU_UPDATE_20A5374i_patch_11.0 2020-09-23 11:53:16+02 macmini SoftwareUpdateNotificationManager[727]: SUOSUShimController: Armed: 0, with mode: 0, date: (null), updates queued for later: ( ) 2020-09-23 11:53:16+02 macmini softwareupdated[533]: Descriptor has changed since previous download (11.0 vs (null)) 2020-09-23 11:53:16+02 macmini SoftwareUpdateNotificationManager[727]: SUOSUShimController: MSU update is not yet downloaded & prepared 2020-09-23 11:53:16+02 macmini softwareupdated[533]: SoftwareUpdate: request for status for unknown product MSU_UPDATE_20A5374i_patch_11.0 I tried a few things (with or without SoftwareUpdate profile to enable beta, with or without caching server), but without success. Is there a way to upgrade Beta macOS via MDM ? Or is this limited to Released versions - but then, why would the device report Beta updates via MDM ?

With iOS 14 devices we can see that Many MDM Commands Fails with error " Couldn’t communicate with a helper application." . This Error is more frequent in InstallApplication , InstallProfile command , but other MDM commads also face the same issue. I have attach sample response from some devices. We have seen this error in previous version of iOS but with iOS 14 these are very frequent. InstallApplication Errors <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>InstallApplication;Collection=51075000000853127</string> <key>ErrorChain</key> <array> <dict> <key>ErrorCode</key> <integer>1005</integer> <key>ErrorDomain</key> <string>DeviceManagement.error</string> <key>LocalizedDescription</key> <string>Could not install app.</string> </dict> <dict> <key>ErrorCode</key> <integer>4097</integer> <key>ErrorDomain</key> <string>NSCocoaErrorDomain</string> <key>LocalizedDescription</key> <string>Couldn’t communicate with a helper application.</string> </dict> </array> <key>Status</key> <string>Error</string> <key>UDID</key> <string>UDID-UDID</string> </dict> </plist> <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>InstallApplication;Collection=33783000002227119</string> <key>ErrorChain</key> <array> <dict> <key>ErrorCode</key> <integer>4099</integer> <key>ErrorDomain</key> <string>NSCocoaErrorDomain</string> <key>LocalizedDescription</key> <string>Couldn’t communicate with a helper application.</string> </dict> </array> <key>Status</key> <string>Error</string> <key>UDID</key> <string>UDIDUDIDUDID</string> </dict> </plist> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>InstallApplication;Collection=51075000000853127</string> <key>ErrorChain</key> <array> <dict> <key>ErrorCode</key> <integer>1005</integer> <key>ErrorDomain</key> <string>DeviceManagement.error</string> <key>LocalizedDescription</key> <string>Could not install app.</string> </dict> <dict> <key>ErrorCode</key> <integer>4097</integer> <key>ErrorDomain</key> <string>NSCocoaErrorDomain</string> <key>LocalizedDescription</key> <string>Couldn’t communicate with a helper application.</string> </dict> </array> <key>Status</key> <string>Error</string> <key>UDID</key> <string>UDID-UDID</string> </dict> </plist> InstallProfile Errors <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>SingletonRestriction</string> <key>ErrorChain</key> <array> <dict> <key>ErrorCode</key> <integer>4099</integer> <key>ErrorDomain</key> <string>NSCocoaErrorDomain</string> <key>LocalizedDescription</key> <string>Couldn’t communicate with a helper application.</string> </dict> </array> <key>Status</key> <string>Error</string> <key>UDID</key> <string>UDIDUDID</string> </dict> </plist> AvailableOSUpdate Error <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>AvailableOSUpdates</string> <key>ErrorChain</key> <array> <dict> <key>ErrorCode</key> <integer>12050</integer> <key>ErrorDomain</key> <string>MCMDMErrorDomain</string> <key>LocalizedDescription</key> <string>The attempt to check for an available update failed.</string> <key>USEnglishDescription</key> <string>The attempt to check for an available update failed.</string> </dict> <dict> <key>ErrorCode</key> <integer>2214</integer> <key>ErrorDomain</key> <string>DeviceManagement.error</string> <key>LocalizedDescription</key> <string>Scan failed.</string> </dict> <dict> <key>ErrorCode</key> <integer>4097</integer> <key>ErrorDomain</key> <string>NSCocoaErrorDomain</string> <key>LocalizedDescription</key> <string>Couldn’t communicate with a helper application.</string> </dict> </array> <key>Status</key> <string>Error</string> <key>UDID</key> <string>UDIDUDIDUDID</string> </dict> </plist> ClearPasscode <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>ClearPasscode</string> <key>ErrorChain</key> <array> <dict> <key>ErrorCode</key> <integer>701</integer> <key>ErrorDomain</key> <string>DeviceManagement.error</string> <key>LocalizedDescription</key> <string>The device’s passcode cannot be cleared.</string> </dict> <dict> <key>ErrorCode</key> <integer>4097</integer> <key>ErrorDomain</key> <string>NSCocoaErrorDomain</string> <key>LocalizedDescription</key> <string>Couldn’t communicate with a helper application.</string> </dict> </array> <key>Status</key> <string>Error</string> <key>UDID</key> <string>UDIDUDIDUDID</string> </dict> </plist>

Overview: Our phones currently are configured with a basic MDM iOS policy. The policy has not been changed since January this year. After the update from iOS 13 to iOS 14, the functionality to scan bar code via the Camera app stopped working. A border surrounding the barcode shows up, but the safari pop-up link does not drop down for a user to click. Relevant settings: There are no restrictions on the camera app and the "Scan QR Code" setting is turned ON After more research, the following has been identified: After un-enrolling the device with MDM, the QR Code scanner works as expected. A factory reset selecting "Erase All Content" option was completed on an iPhone6S and an iPhone7 (iOS 14.0.1) and this resolved the issue. After deploying an empty MDM policy to a test phone, the functionality was still not restored. Any ideas on what could be causing the issue?

Hi. This is may sound quite strange, but I hope someone else has experienced this and can help me. I recently had a request to add 2 iPhone 12 Pro Max UDID's to my developer account. 1 device from the UK adds fine with no issues. The second device from UAE, adds successfully however the Device shows as iPhone but the Device Type is appearing as iPad Pro 12.9-inch Wi-Fi (4th generation). Due to this we are unable to install any of our test apps on this device. We are 100% sure it is an iPhone 12 Pro Max. Any direction or support would be appreciated. Thanks, R

Hello, 3 months ego we started the procedure to create our own iOS MDM solution. https://developer.apple.com/business/documentation/MDM-Protocol-Reference.pdf First, we created an Apple developer account and asked to add the MDM CSR request option: our request for has been rejected. Support told us that only Apple Developer Enterprise owners can have this option. Second, The support told us to create an Apple Business Manager account: there are no option to create an MDM CSR request. Third, we asked 3 times Apple Developer Enterprise account but our requests was rejected and support asked as to create Apple Developer and Apple Business Manager accounts (already created). Someone had the same issue ? thanks ! Regards,

Hello, I hope I am in the right place. I have a question about "account via VPN" for my mobileconfig. I found this link on the internet (https://support.apple.com/de-de/guide/mdm/mdm2e7ee35ec/web) Account via VPN is advertised. However, I can not find anything in the VPN Payload Developer Guide. Also I can not find anything on the Internet. I find only App per VPN. But what about "Account via VPN"? (https://developer.apple.com/documentation/devicemanagement/vpn) does anyone know where I can find the VPN Payload? or does anyone have a piece of code please? Thanks a lot Best Regards Vetozzz

I'm working on a CI/CD solution based on VMs deployed from images. Each VM has an external disk attached. Most of the applications I need to run on fresh OS require manual approval in a UI session for using that disk (java, powershell, etc). This is a huge showstopper for my project. Is there a way to allow FDA for certain applications via command line or bypass this check anyhow for testing purposes ?

I am experiencing an issue with Xcode and my iPhone. When I connect my iPhone to my Macbook, all is okay. The device is detected and everything works correctly. However, launching Xcode (just accessing the "Welcome to Xcode" project selection screen) causes the device to be instantly disconnected from my laptop and disappear from Finder. When I go to Window - Devices and Simulator, my device is not recognized anymore. When I physically disconnect the reconnect it, it appears one second and disappears instantly. Closing Xcode lets me reconnect the device normally. Due to this issue, I am not able to use my physical device for development purpose. Could you please let me know how to fix this ? Laptop : Macbook Pro 2017 13'' - BigSur 11.2.3 Xcode : 12.4 Device : iPhone 7 - iOS 14.4.

We are experiencing an issue on several devices when attempting an enrollment to Mobile Device Management (MDM). The device is communicating, but it appears there is a problem with certificates that won't allow the enrollment to complete. Automated Device Enrollment (ADE, formerly DEP) enrollments do not work either. Failure to enroll in MDM is occurring on the following types of devices: Big Sur M1 Architecture Big Sur Intel Architecture Catalina Console log below of before, during, and after an attempt for MDM enrollment on a device experiencing this issue: language error 13:33:38.859611-0600 CertificateService Server capabilities lack support for 3DES but we're going to use it anyway error 13:33:39.240005-0600 CertificateService Error (-26275) decrypting response payload error 13:33:39.240183-0600 CertificateService ProcessRequestCertSignatureResponse: No certificate received error 13:33:39.240703-0600 CertificateService [ERROR] : [MDM_SCEP_Enroll] Calling SCEPCopyCertificate --  NSOSStatusErrorDomain:-25300 error 13:33:39.274025-0600 mdmclient [ERROR] PlugIn: InstallPayload [CertificateService] Error: Error Domain=NSOSStatusErrorDomain Code=-25300 "errKCItemNotFound / errSecItemNotFound:  / The item cannot be found." UserInfo={IsInternalError=true} error 13:33:39.292742-0600 kernel System Policy: WSDaemon(130) deny(1) file-read-metadata /private/var/db/ConfigurationProfiles/Store/ConfigProfiles.binary error 13:33:39.340017-0600 kernel Sandbox: coreaudiod(220) deny(1) file-read-metadata /Library/Keychains error 13:33:39.371452-0600 mdmclient CPProfileManager.installProfile returning error -25300 (private) error 13:33:39.392812-0600 kernel System Policy: WSDaemon(130) deny(1) file-read-metadata /private/var/db/ConfigurationProfiles/Store/ProfilePurgatory error 13:33:39.392968-0600 kernel System Policy: WSDaemon(130) deny(1) file-read-metadata /private/var/db/ConfigurationProfiles/Store/ProfilePurgatory/D1BA2076-4015-4062-BF9A-45474D415341_19975F4D-F21E-44C5-BC98-1F7F4A48AE70.mobileconfig.profilepurgatory

I upgraded to Big Sur 11.2.3 and now the toolbar brightness keys do not work. Brightness indicator appears on screen and the buttons appear to adjust up or down, but the actual brightness does not change unless I manually go into Display Settings and adjust. I've seen old posts about this issue from ~5 months ago, all marked as resolved. Is this a new issue with the upgrade? Have tried restarting and turning off / on all auto brightness settings. My system is 1 week old, M1 Macbook Pro. Thanks for your help.

Hi, We have a profile to set the VPN configuration of the device. It is a BYOD device with per app vpn setting: https://developer.apple.com/documentation/devicemanagement/applayervpn We add following keys to our profile:  "SafariDomains", "CalendarDomains", "ContactsDomains" and "MailDomains". The "SafariDomains" works and shown in the VPN profile settings in the device(in "Included Apps" section), with the given domains. However, all other features(came with iOS 13 MailDomains and etc.) does not wok The domains we use are internal domains, so the DNS of the system is set within "VPN" connection. When we access the sites via Safari VPN works fine and we can access them, when we try Mail apps or try adding account via Settings then it fails. We tried both "packet-tunnel" and "app-proxy" as ProviderType in the AppLayerVPN.VPN settings but it still did not work. When we set the VPN on the whole device then the mail app and accounts can be fetched, so we do not think that it is VPN server related. What are we missing here? Any help or advice is appreciated. Thanks Our example profile: dict keyIKEv2/key dict keyAuthenticationMethod/key stringCertificate/string keyChildSecurityAssociationParameters/key dict keyDiffieHellmanGroup/key integer14/integer keyEncryptionAlgorithm/key string3DES/string keyIntegrityAlgorithm/key stringSHA1-96/string keyLifeTimeInMinutes/key integer1440/integer /dict keyDeadPeerDetectionRate/key stringMedium/string keyDisableMOBIKE/key integer0/integer keyDisableRedirect/key integer0/integer keyEnableCertificateRevocationCheck/key integer0/integer keyEnablePFS/key integer1/integer keyIKESecurityAssociationParameters/key dict keyDiffieHellmanGroup/key integer14/integer keyEncryptionAlgorithm/key string3DES/string keyIntegrityAlgorithm/key stringSHA1-96/string keyLifeTimeInMinutes/key integer1440/integer /dict keyOnDemandEnabled/key integer1/integer keyLocalIdentifier/key stringuser@example.com/string keyPayloadCertificateUUID/key string5c0c7855-a8d9-4c86-8a21efec8335105a/string keyRemoteAddress/key stringvpn.example.com/string keyRemoteIdentifier/key stringvpn.example.com/string keyUseConfigurationAttributeInternalIPSubnet/key integer0/integer /dict keyIPv4/key dict keyOverridePrimary/key integer1/integer /dict keyVPNUUID/key string4dfdca51-aea1-461b-9a76-d24e8a2f9c07/string keyOnDemandMatchAppEnabled/key true/ keySafariDomains/key array stringinternal.lan/string /array keyCalendarDomains/key array stringinternal.lan/string stringoutlook.internal.lan/string /array keyContactsDomains/key array stringinternal.lan/string stringoutlook.internal.lan/string /array keyMailDomains/key array stringinternal.lan/string stringoutlook.internal.lan/string /array keyPayloadDescription/key stringConfigures VPN settings/string keyPayloadDisplayName/key stringVPN/string keyPayloadIdentifier/key stringcom.apple.vpn.managed.applayer.ebec689e-6c37-4344-a590-09fe4a22f436/string keyPayloadType/key stringcom.apple.vpn.managed.applayer/string keyPayloadUUID/key stringebec689e-6c37-4344-a590-09fe4a22f436/string keyPayloadVersion/key integer1/integer keyProxies/key dict keyHTTPEnable/key integer0/integer keyHTTPSEnable/key integer0/integer /dict keyUserDefinedName/key stringMDM VPN/string keyVPNType/key stringIKEv2/string keyVPN/key dict keyProviderType/key stringpacket-tunnel/string /dict /dict Complete Profile - https://developer.apple.com/forums/content/attachment/220f2081-3de5-4274-bacd-96bb8470524a