LOM 有效负载示例配置和命令发布
MDM 分别在每台 Mac 上安装一个“设备和控制机”配置 (LightsOutManagementLOM)。
MDM 向作为“设备”的 Mac 发布 LOMSetupRequestCommand。
作为“设备”的 Mac 使用 LOMSetupRequestResponse 来响应,其中包含发布 LOM 命令所需的信息,如
PrimaryIPv6AddressList
、SecondaryIPv6AddressList
。
MDM 向作为“控制机”的 Mac 发布 LOM Device Request Command。
此命令包含在客户端证书有效负载中已配置的
DeviceDNSName
。命令(PowerON
、PowerOFF
或Reset
)和要发送到的 IPv6 地址。然后 LOMDeviceRequestResponse 将返回指示成功或错误的
ResponseData
。
将 SCEP 有效负载用于设备身份的配置构建示例:
配置为“控制机”的 Mac
<key>PayloadContent</key>
<array>
<dict>
<key>ControllerCertificateUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
<key>DeviceCACertificateUUIDs</key>
<array>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</array>
<key>PayloadDisplayName</key>
<string>LOM Enrollment</string>
<key>PayloadType</key>
<string>com.apple.lom</string>
<key>PayloadUUID</key>
<string>DD64FC01-A2D2-4268-B892-33300F7205C3</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Device CA Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.pem</string>
<key>PayloadUUID</key>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Client Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.scep</string>
<key>PayloadUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
</dict>
</array>
配置为“设备”的 Mac
<key>PayloadContent</key>
<array>
<dict>
<key>ControllerCACertificateUUIDs</key>
<array>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</array>
<key>DeviceCertificateUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
<key>PayloadDisplayName</key>
<string>LOM Enrollment</string>
<key>PayloadType</key>
<string>com.apple.lom</string>
<key>PayloadUUID</key>
<string>DD64FC01-A2D2-4268-B892-33300F7205C3</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Controller CA Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.pem</string>
<key>PayloadUUID</key>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Client Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.scep</string>
<key>PayloadUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
</dict>
</array>
配置为“控制机”和“设备”的 Mac
<key>PayloadContent</key>
<array>
<dict>
<key>ControllerCACertificateUUIDs</key>
<array>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</array>
<key>DeviceCertificateUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
<key>ControllerCertificateUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
<key>DeviceCACertificateUUIDs</key>
<array>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</array>
<key>PayloadDisplayName</key>
<string>LOM Enrollment</string>
<key>PayloadType</key>
<string>com.apple.lom</string>
<key>PayloadUUID</key>
<string>DD64FC01-A2D2-4268-B892-33300F7205C3</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Device and Controller CA Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.pem</string>
<key>PayloadUUID</key>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Client Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.scep</string>
<key>PayloadUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
</dict>
</array>