User Guide

24 Chapter 1 Deploying iPhone and iPod touch
Phase 2 – Device Authentication: After the user accepts the installation of the profile
received in phase 1, the device looks up the requested attributes, adds the challenge
response (if provided), signs the response using the device’s built-in identity (Apple-
issued certificate), and sends it back to the profile distribution service using HTTP Post.
For a sample configuration profile for this phase, see “Sample Phase 2 Device
Response” on page 85.
Profile service
Attributes: UDID,
OS Version, IMEI
Challenge token:
AnneJohnson1
Phase 2 - Device Authentication
Signed response via POST
sample