Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The public key you generated when Adding the WSO2 EMM Solution to the DEP Portal is configured to expire in a year. Therefore, you need to generate a new public key in the .pem format.

Excerpt

...

  1. Create a new directory to generate the public key.

  2. Create a file named openssl.cnf in the directory you just created.

  3. Copy the code given below to the openssl.cnf and save it.

    Code Block
    [ v3_req ]# Extensions to add to a certificate request
    basicConstraints=CA:TRUE
    keyUsage = digitalSignature, keyEncipherment
     
    [ v3_ca ]
    # Extensions for a typical CA
    # PKIX recommendation.
    subjectKeyIdentifier=hash
    authorityKeyIdentifier=keyid:always,issuer
    # This is what PKIX recommends but some broken software chokes on critical
    # extensions.
    basicConstraints = critical,CA:true
    # So we do this instead.
    #basicConstraints = CA:true
    # Key usage: this is typical for a CA certificate. However since it will
    # prevent it being used as an test self-signed certificate it is best
    # left out by default.
    keyUsage = digitalSignature, keyCertSign, cRLSign
  4. Navigate into the directory and run the commands given below in the given order.

    Code Block
    openssl genrsa -out dep_private.key 4096 
    
    openssl req -new -key dep_private.key -out dep.csr
    
    openssl x509 -req -days 365 -in dep.csr -signkey dep_private.key -out dep.crt -extensions v3_ca -extfile ./openssl.cnf
    
    openssl x509 -in dep.crt -out dep.pem

    Now, you see the dep.pem file created in the directory you created.

Generating the new DEP server token

Follow the steps given below to generate the new DEP server token from the DEP portal:

...

Navigate to the Apple Deployment Programs.

Note
titleNote!

Do not close this browser session until you are done configuring the DEP portal. If you do close the browser session, you need to enter the verification code again and start configuring the DEP portal from where you stopped.

...

Sign in with your organization's Apple credentials.

...

Click Get Started to automate the Mobile Device Management (MDM) enrollment.
Image Removed

...

Click on the server you created for WSO2 IoT Server's EMM solution.

...

Click Replace Key and upload the .pem file you just generated.
Image Removed

...

-include
IOTS330:Renewing the DEP Server Token
IOTS330:Renewing the DEP Server Token
nopaneltrue

Updating WSO2 IoT Server with the token

...