Linking the WSO2 EMM Solution with Apple DEP

After creating a container or virtual machine for WSO2 IoT Server's Enterprise Mobility Management (EMM) solution in the Apple Device Enrollment Program (DEP), you need to link to the Apple DEP account from WSO2 IoT Server. 

Follow the steps given below to link WSO2 IoT Server's EMM solution with the Apple DEP:

1. Navigate to the folder where you saved the Apple server token you downloaded when Adding the WSO2 EMM Solution to the DEP Portal via the terminal.

2. Decrypt the server token using the command given below:

   openssl smime -decrypt -in "<THE-.PM7-TOKEN-SERVER-FILE-NAME>.pm7" -inkey "dep_private.key" > token.json

   You see the token.json file created in the same directory.

3. Start WSO2 IoT Server's core profile.

   cd <IOTS_HOME>/bin
   ./iot-server.sh

4. Sign in by entering the EMM administrators username and password. The default username is admin and the default password is admin.
5. Click the  icon > CONFIGURATION MANAGEMENT > PLATFORM CONFIGURATIONS > iOS Configurations.
6. Scroll down until you come to DEP only configurations.
   

7. Update the DEP related details:

   Agent App ID	You are able to enroll and iOS device with WSO2 IoT Server's EMM solution, with or without the agent. If you are not using the agent, you can leave this section blank. If you are using the agent, follow the steps given below: Before you begin! Download Xcode and install it. Configure WSO2 IoT Server to install iOS mobile applications: Open the <IOTS_HOME>/conf/app-manager.xml file. Add %https% as the value for the AppDownloadURLHost property. <Config name="AppDownloadURLHost">%https%</Config> Download the iOS agent source code. For more information on the agent version related to the IoT Server version you are using, see WSO2 IoT Server and Agent Compatibility. Build and export the project as an iOS application using Xcode. This will generate an ipa file. Sign in to WSO2 IoT Server's App Publisher console: https://<IOTS_SERVER_HOST>:9443/publisher. The default username is admin and the default password is admin, and the default IOTS_SERVER_HOST is localhost. Create a new application and upload the ipa file you just generated. Once the application is created, click on the application. Note down the App ID from the URL. Example: https://172.20.10.12:9443/publisher/asset/mobileapp/667026af-2ed4-426f-95c3-246a5707db66 Enter the App ID as the value for Agent App ID.
   Consumer Key	Open the token.json file you just generated and enter the value given for the consumer_key here.
   Consumer Secret	Enter the value given for the consumer_secret in the token.json file.
   Access Token	Enter the value given for access_token in the token.json file.
   Access Secret	Enter the value given for access_secret in the token.json file, here.
   Access Token Expiry	Enter the value given for access_token_expiry in the token.json file, here.

8. Click Save.

What's next?

• Configure the profile settings in the DEP portal. For more information, see Creating and Assigning Profiles to iOS Devices.
• The DEP server token expires in a year (365 days). Therefore, when you renew it, you need to update the WSO2 IoT Server DEP configurations that are under the iOS platform configurations. For more information, see Renewing the DEP Server Token.