windows phone 8 - MDM Enrollment Service: Certificates in provisioning XML -
i implementing mdm solution windows phone 8. refering enterprise device management protocol , have question reqarding certificates during enrollment phase. document says response should contain:
the client certificate, enterprise root ca certificate, , intermediate ca certificate.
in sample provisioning xml shows:
<characteristic type="certificatestore"> <characteristic type="root"> <characteristic type="system"> <characteristic type="031336c933cc7e228b88880d78824fb2909a0a2f"> <parm name="encodedcertificate" value="b64 encoded cert insert here" /> </characteristic> </characteristic> </characteristic> <characteristic type="my" > <!-- "my" , “user” case-sensitive --> <characteristic type="user"> <characteristic type="f9a4f20fc50d990fdd0e3db9afcbf401818d5462"> <parm name="encodedcertificate" value="b64encodedcertinsertedhere" /> </characteristic> <characteristic type="privatekeycontainer"/> <!-- tag must present xml syntax correctness. --> </characteristic> </characteristic> </characteristic>
i sign client certificate using intermediate certificate, signed thawte certificate.
|thawte premium server ca certificate | - intermediate certificate | - signed client certificate
what certificates need provide in xml , how it?
you need install both certificates on device can authenticate server ssl certificate during handshake.
there ca certificates pre installed on windows phone 8 device. may possible root certicate installed in case able away installing intermediate certificate.
check here list of pre installed ca certificates
note : coulomb of thumbprint not visible copy table , paste in excel see more information
Comments
Post a Comment