Secure device configuration profiles

摘要

A method for configuring a device includes receiving a first configuration profile comprising a first configuration and a first certificate and a second certificate, verifying the first configuration profile with the first certificate, receiving a user input indicating to accept the first configuration profile, configuring the device according to the first configuration, receiving a second configuration profile comprising a second configuration, verifying the second configuration profile with the second certificate and updating the device according to the second configuration, wherein the user is unaware of the updating.

主权项

1. A method for securely configuring a device, the method comprising:
at the device:
receiving a first configuration profile from one or more data processing systems, the first configuration profile comprising:
(i) a first configuration,(ii) a first certificate to authenticate the first configuration profile, and(iii) a second certificate to authenticate a second configuration profile;verifying, based on the first certificate, that the first configuration profile is authentic;receiving a user input that indicates an acceptance of the first configuration profile;in response to the user input, configuring the device according to the first configuration; andwhen the second configuration profile is received:
verifying, based on the second certificate, that the second configuration profile is authentic, andautomatically configuring the device according to a second configuration set forth by the second configuration profile, wherein the second configuration modifies at least one element of the first configuration.