iOS get Configuration Profiles that are installed

Question

The app I am currently working on requires the use of Configuration Profiles in order to connect to a server to download XML. The certificates are distributed in the form of .p12 files, and they can be installed in the settings app in the iPhone like the bottom-left image.

The problem is that all over the internet people are saying that this is impossible.

HOWEVER, Junos Pulse can do this(bottom-right image).

It is only reading the Configuration Profiles which is exactly what I need.

I did not have to install them into the Junos Pulse app. Adding them to the system, and launching the app is enough for my profiles to be recognized.

Thanks for your help :)

Solution 1

You won't. Your application is sandboxed, read the iOS App Programming Guide. Developer profiles are not public information for applications to access.

Solution 2

The reason the Junos app is able to do this has been explained in a post in the Apple Developer Forums.

Original Question: https://devforums.apple.com/message/660579#660579

Explanation about Junos app: https://devforums.apple.com/message/351326#351326

To sum it up, access to this is not provided in the SDK and is by invitation from Apple only.

Solution 3

I am not sure what you are trying to accomplish, but the iOS Keychain services allows you to store and retrieve certificates and keys in a (supposedly) secure way. I have not used the API for other than storing passwords, so I cannot say how it works with certificates, but according to the docs it might work for you.

In particular, have a look at the SecItemCopyMatching function.

Comments

[David Skrundz]

So how does Junos Pulse do it?

[WrightsCS]

It looks like you have to manually enter them. I just installed the app and I don't see any of my profiles anywhere.

[David Skrundz]

If you go Configuration -> Add new configuration -> Certificate, there will be a list of every certificate installed.

[David Skrundz]

My certificates are .p12 files designed for server authentication. I just confirmed that the order of installation doesn't matter.

[Radu Simionescu]

MDM client apps can view them actually. So, not the usual apps

[WrightsCS]

My, how things have changed in the past 5 years!