LOM verisi örnek konfigürasyonu ve komut yayınlama
MDM her Mac’e sırayla bir Aygıt ve Denetleyici konfigürasyonu (LightsOutManagementLOM) yükler.
Bu veri, her biri diğerine yüklenen Sertifika Otoriteleri’ni kullanarak Aygıt ve Denetleyici güvenini sağlar.
Bu veri,
com.apple.lomverisinin içindekiControllerCertificateUUIDveDeviceCertificateUUIDtarafından referans verilen sertifika UUID’sini kullanarak Mac bilgisayarının kimliğini Aygıt, Denetleyici ya da her ikisi olarak ayarlar, bu referans verilen sertifika verisi PKCS12 veya SCEP olabilir.
MDM, Aygıt olarak görev yapan Mac’e bir LOMSetupRequestCommand verir.
Aygıt olarak görev yapan Mac,
PrimaryIPv6AddressList,SecondaryIPv6AddressListgibi LOM komutlarının yayınlanması için gerekli bilgileri içeren LOMSetupRequestResponse ile yanıt verir.
MDM, Denetleyici olarak görev yapan Mac’e bir LOM Device Request Command verir.
Bu komut, istemci sertifika verisinde ayarlanan
DeviceDNSName’i içerir. Komut (PowerON,PowerOFFveyaReset) ve gönderim yapılacak IPv6 adresleri.LOMDeviceRequestResponse böylece başarı veya hata belirten
ResponseDataile döndürür.
Aygıt kimliği için SCEP Verileri’ni kullanan örnek konfigürasyon yapısı:
Denetleyici olarak ayarlanan bir Mac
<key>PayloadContent</key><array> <dict> <key>ControllerCertificateUUID</key> <string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string> <key>DeviceCACertificateUUIDs</key> <array> <string>153517F0-D444-4DA9-9896-874E66BE89AE</string> </array> <key>PayloadDisplayName</key> <string>LOM Enrollment</string> <key>PayloadType</key> <string>com.apple.lom</string> <key>PayloadUUID</key> <string>DD64FC01-A2D2-4268-B892-33300F7205C3</string> </dict> <dict> ... <key>PayloadDisplayName</key> <string>Device CA Certificate</string> <key>PayloadType</key> <string>com.apple.security.pem</string> <key>PayloadUUID</key> <string>153517F0-D444-4DA9-9896-874E66BE89AE</string> </dict> <dict> ... <key>PayloadDisplayName</key> <string>Client Certificate</string> <key>PayloadType</key> <string>com.apple.security.scep</string> <key>PayloadUUID</key> <string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string> </dict></array>Aygıt olarak ayarlanan bir Mac
<key>PayloadContent</key><array> <dict> <key>ControllerCACertificateUUIDs</key> <array> <string>153517F0-D444-4DA9-9896-874E66BE89AE</string> </array> <key>DeviceCertificateUUID</key> <string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string> <key>PayloadDisplayName</key> <string>LOM Enrollment</string> <key>PayloadType</key> <string>com.apple.lom</string> <key>PayloadUUID</key> <string>DD64FC01-A2D2-4268-B892-33300F7205C3</string> </dict> <dict> ... <key>PayloadDisplayName</key> <string>Controller CA Certificate</string> <key>PayloadType</key> <string>com.apple.security.pem</string> <key>PayloadUUID</key> <string>153517F0-D444-4DA9-9896-874E66BE89AE</string> </dict> <dict> ... <key>PayloadDisplayName</key> <string>Client Certificate</string> <key>PayloadType</key> <string>com.apple.security.scep</string> <key>PayloadUUID</key> <string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string> </dict></array>Denetleyici ve Aygıt olarak ayarlanan bir Mac
<key>PayloadContent</key><array> <dict> <key>ControllerCACertificateUUIDs</key> <array> <string>153517F0-D444-4DA9-9896-874E66BE89AE</string> </array> <key>DeviceCertificateUUID</key> <string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string> <key>ControllerCertificateUUID</key> <string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string> <key>DeviceCACertificateUUIDs</key> <array> <string>153517F0-D444-4DA9-9896-874E66BE89AE</string> </array> <key>PayloadDisplayName</key> <string>LOM Enrollment</string> <key>PayloadType</key> <string>com.apple.lom</string> <key>PayloadUUID</key> <string>DD64FC01-A2D2-4268-B892-33300F7205C3</string> </dict> <dict> ... <key>PayloadDisplayName</key> <string>Device and Controller CA Certificate</string> <key>PayloadType</key> <string>com.apple.security.pem</string> <key>PayloadUUID</key> <string>153517F0-D444-4DA9-9896-874E66BE89AE</string> </dict> <dict> ... <key>PayloadDisplayName</key> <string>Client Certificate</string> <key>PayloadType</key> <string>com.apple.security.scep</string> <key>PayloadUUID</key> <string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string> </dict></array>