Credentials Settings
Use this pane to add certificates to the device. Certificates in raw formats PKCS1 (.cer, .der, .crt) and PKCS12 (.p12, .pfx) are supported.
When installing an identity certificate on the device, make sure that the file contains a certificate and not just a private key. If you install only a private key without the necessary certificate, the identity won’t be valid. If you install an identity certificate without a private key, the user is asked to enter the private key every time the certificate is used by the device.
Additionally, make sure that the certificate authority that issued the server’s certificate is trusted on the device. You don’t need to add root certificates that are included on the device by Apple. To view a list of the preinstalled system roots, see the Apple Support article at http://support.apple.com/kb/HT2185.
Instead of installing certificates with a profile, you can let users use Safari to download the certificates directly to their device from a webpage. Or, you can email certificates to users. See “Installing Identities and Root Certificates” on page 36 for more information.
To add multiple credentials, click the Add (+) button.
Advanced Settings
The Advanced pane lets you change the device’s Access Point Name (APN) settings. The APN settings define how the device connects to the carrier’s network. Change these settings only when specifically directed to do so by a carrier network expert. If these settings are incorrect, the device can’t access data using the cellular network. To undo an inadvertent change to these settings, delete the profile from the device. Apple recommends that you define APN settings in a configuration profile separate from other enterprise settings.
Editing Configuration Profiles
With iPhone Configuration Utility for Mac OS X, select a profile in the Configurations list, and then use the settings panes to make changes. You can also import a profile by choosing File > Add to Library and then selecting a .mobileconfig file. If the settings panes aren’t visible, click the Show Editor button in the toolbar.
With the
If a profile is signed, you must click Remove Signature in the General pane before you can edit it.
Chapter 2 Creating and Deploying Configuration Profiles
25
