LOM 承載資料範例設定和指令核發
MDM 會在每部 Mac 上分別安裝「裝置」和「控制器」設定(LightsOutManagementLOM)。
MDM 會發行 LOMSetupRequestCommand 給作為「裝置」的 Mac。
作為「裝置」的 Mac 會以包含 LOM 指令核發之所需資訊的 LOMSetupRequestResponse 回應,例如
PrimaryIPv6AddressList
、SecondaryIPv6AddressList
。
MDM 會核發 LOMSetupRequestCommand 給作為「控制器」的 Mac。
此指令會包含
DeviceDNSName
,如用戶端憑證承載資料中所設定。指令(PowerON
、PowerOFF
或Reset
)和要傳送的 IPv6 位址。LOMDeviceRequestResponse 會接著傳回表示成功或錯誤的
ResponseData
。
運用「SCEP 承載資料」進行裝置識別的設定架構範例:
設為「控制器」的 Mac
<key>PayloadContent</key>
<array>
<dict>
<key>ControllerCertificateUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
<key>DeviceCACertificateUUIDs</key>
<array>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</array>
<key>PayloadDisplayName</key>
<string>LOM Enrollment</string>
<key>PayloadType</key>
<string>com.apple.lom</string>
<key>PayloadUUID</key>
<string>DD64FC01-A2D2-4268-B892-33300F7205C3</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Device CA Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.pem</string>
<key>PayloadUUID</key>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Client Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.scep</string>
<key>PayloadUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
</dict>
</array>
設為「裝置」的 Mac
<key>PayloadContent</key>
<array>
<dict>
<key>ControllerCACertificateUUIDs</key>
<array>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</array>
<key>DeviceCertificateUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
<key>PayloadDisplayName</key>
<string>LOM Enrollment</string>
<key>PayloadType</key>
<string>com.apple.lom</string>
<key>PayloadUUID</key>
<string>DD64FC01-A2D2-4268-B892-33300F7205C3</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Controller CA Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.pem</string>
<key>PayloadUUID</key>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Client Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.scep</string>
<key>PayloadUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
</dict>
</array>
設為「控制器」和「裝置」的 Mac
<key>PayloadContent</key>
<array>
<dict>
<key>ControllerCACertificateUUIDs</key>
<array>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</array>
<key>DeviceCertificateUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
<key>ControllerCertificateUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
<key>DeviceCACertificateUUIDs</key>
<array>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</array>
<key>PayloadDisplayName</key>
<string>LOM Enrollment</string>
<key>PayloadType</key>
<string>com.apple.lom</string>
<key>PayloadUUID</key>
<string>DD64FC01-A2D2-4268-B892-33300F7205C3</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Device and Controller CA Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.pem</string>
<key>PayloadUUID</key>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Client Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.scep</string>
<key>PayloadUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
</dict>
</array>