User Guide

42 Chapter 2 Creating and Deploying Configuration Profiles
b Sign Configuration Profile: The .mobileconfig file is signed and won’t be installed by a
device if it’s altered. Some fields are obfuscated to prevent casual snooping if the file
is examined. Once installed, the profile can only be updated by a profile that has the
same identifier and is signed by the same copy of iPhone Configuration Utility.
c Sign and Encrypt Profile: Signs the profile so it cannot be altered, and encrypts all of
the contents so the profile cannot be examined and can only be installed on a
specific device. If the profile contains passwords, this option is recommended.
Separate .mobileconfig files will be created for each of the devices you select from
the Devices list. If a device does not appear in the list, it either hasn’t been previously
connected to the computer so that the encryption key can be obtained, or it hasn’t
been upgraded to iPhone OS 3.0 or later.
2 Click Share, and new Mail (Mac OS X) or Outlook (Windows) message opens with the
profiles added as uncompressed attachments. The files must be uncompressed for the
device to recognize and install the profile.
Distributing Configuration Profiles on the Web
You can distribute configuration profiles using a website. Users install the profile by
downloading it using Safari on their device. To easily distribute the URL to your users,
send it via SMS.
To export a configuration profile:
1 Click the Export button in the iPhone Configuration Utility toolbar.
In the dialog that appears, select a security option:
a None: A plain text .mobileconfig file is created. It can be installed on any device.
Some content in the file is obfuscated to prevent casual snooping if the file is
examined, but you should make sure that when you put the file on your website it’s
accessible only by authorized users.
b Sign Configuration Profile: The .mobileconfig file is signed and won’t be installed by a
device if it’s altered. Once installed, the profile can only be updated by a profile that
has the same identifier and is signed by the same copy of iPhone Configuration
Utility. Some of the information in the profile is obfuscated to prevent casual
snooping if the file is examined, but you should make sure that when you put the file
on your website, it’s accessible only by authorized users.
c Sign and Encrypt Profile: Signs the profile so it cannot be altered, and encrypts all of
the contents so the profile cannot be examined and can only be installed on a
specific device. Separate .mobileconfig files will be created for each of the devices
you select from the Devices list.
2 Click Export, then select a location to save the .mobileconfig files.
The files are ready for posting on your website. Don’t compress the .mobileconfig file or
change its extension, or the device won’t recognize or install the profile.