Policy configuration for mobile device applications

摘要

Methods, articles of manufacture, and apparatus to perform policy configuration for mobile device applications are disclosed. A disclosed example method includes determining whether a digital certificate associated with a application executable on a mobile device has been signed by a first trusted certificate authority, the first trusted certificate authority being included in a list of trusted certificate authorities hard-coded in the mobile device, and when the digital certificate is determined to have been signed by the first trusted certificate authority, configuring the application for execution on the mobile device based on an access privilege indicating a physical interface of the mobile device the application is permitted to access, and execution configuration information associated with the application.

主权项

1. A method comprising:
retrieving, using a processor, an access privilege associated with an application that is executable on a mobile device, and a list of trusted certificate authorities, from a removable memory device communicatively coupled with the mobile device, the access privilege indicating whether the application is permitted to access a network interface of the mobile device; determining, using the processor, whether a digital certificate associated with the application has been signed by a first trusted certificate authority, the first trusted certificate authority being included in the list of trusted certificate authorities; and when the digital certificate is determined to have been signed by the first trusted certificate authority, configuring the application based on at least the access privilege to have restricted access to the network interface of the mobile device, the access restricted to be through a virtual private network client that is on the mobile device and in communication with the network interface of the mobile device via a virtual private network tunnel established on the mobile device between the virtual private network client and the network interface.