Obtaining the Signed CSR File

To test out the iOS device enrollment process of WSO2 EMM, you need to have the required certificates made available via Apple. This is possible only if your organization has registered with the Apple Developer Enterprise Program. In order to make the testing process easy for you, we provide you with a signed certificate. 

Follow the instructions below to obtain the signed CSR file in the .plst format:

1. Create a Certificate Signing Request (CSR) file (e.g., customer.csr)  from the EMM server using your private key. Keep your private key and CSR file in a safe location for further reference.

   openssl genrsa -des3 -out customerPrivateKey.pem 2048
   openssl req -new -key customerPrivateKey.pem -out customer.csr

   After the above command is executed, you will be prompted to enter some information. Make sure to fill in all the information as it will be incorporated into the CSR with your organization’s official details. The compulsory fields have been described as follows:

   Filed	Usage/Purpose
   Organization Name	Identifies what organization the CSR belongs to.
   Email	When a certificate expires, the customers will have to renew their certificate. In such situations, the email will be used to identify the existing customers.
   Common name	Fully qualified domain name of your server.

   If the compulsory information is not provided, the CSRs will be rejected in the signing process.

   
   The following is a screenshot of a sample CSR file generation process in Linux. The same process is applicable to Mac users as well.

   

2. Submit the CSR file to WSO2 via our site in order to obtain the signed CSR file in .plist format.

   WSO2 Account Managers will evaluate the CSR file you submit. Once the evaluation process is complete you will receive an email with the following:

   • The signed CSR file in the .plst format.
   • Agent source code.
   • P2 repository, which contains the feature list.

Follow the proceeding steps in iOS server configurations.