LOM 承載資料範例設定和指令簽發
MDM 會在每部 Mac 上分別安裝「裝置」和「控制器」設定(LightsOutManagementLOM)。
MDM 會向擔當「裝置」身份的 Mac 發出 LOMSetupRequestCommand。
擔當「裝置」身份的 Mac 會以 LOMSetupRequestResponse 回應,其會包括簽發 LOM 指令所需的資料,例如
PrimaryIPv6AddressList
、SecondaryIPv6AddressList
。
MDM 會向擔當「控制器」身份的 Mac 發出 LOM 裝置要求指令。
此指令會包括
DeviceDNSName
,如同客户端證書承載資料中的設定一樣。 指令(PowerON
、PowerOFF
或Reset
)和要傳送至的 IPv6 地址。LOMDeviceRequestResponse 會傳回
ResponseData
以表示成功或錯誤。
利用用於裝置身份的「SCEP 承載資料」設定建構的範例:
設定為「控制器」的 Mac
<key>PayloadContent</key>
<array>
<dict>
<key>ControllerCertificateUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
<key>DeviceCACertificateUUIDs</key>
<array>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</array>
<key>PayloadDisplayName</key>
<string>LOM Enrollment</string>
<key>PayloadType</key>
<string>com.apple.lom</string>
<key>PayloadUUID</key>
<string>DD64FC01-A2D2-4268-B892-33300F7205C3</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Device CA Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.pem</string>
<key>PayloadUUID</key>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Client Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.scep</string>
<key>PayloadUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
</dict>
</array>
設定為「裝置」的 Mac
<key>PayloadContent</key>
<array>
<dict>
<key>ControllerCACertificateUUIDs</key>
<array>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</array>
<key>DeviceCertificateUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
<key>PayloadDisplayName</key>
<string>LOM Enrollment</string>
<key>PayloadType</key>
<string>com.apple.lom</string>
<key>PayloadUUID</key>
<string>DD64FC01-A2D2-4268-B892-33300F7205C3</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Controller CA Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.pem</string>
<key>PayloadUUID</key>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Client Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.scep</string>
<key>PayloadUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
</dict>
</array>
設定為「控制器」和「裝置」的 Mac
<key>PayloadContent</key>
<array>
<dict>
<key>ControllerCACertificateUUIDs</key>
<array>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</array>
<key>DeviceCertificateUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
<key>ControllerCertificateUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
<key>DeviceCACertificateUUIDs</key>
<array>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</array>
<key>PayloadDisplayName</key>
<string>LOM Enrollment</string>
<key>PayloadType</key>
<string>com.apple.lom</string>
<key>PayloadUUID</key>
<string>DD64FC01-A2D2-4268-B892-33300F7205C3</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Device and Controller CA Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.pem</string>
<key>PayloadUUID</key>
<string>153517F0-D444-4DA9-9896-874E66BE89AE</string>
</dict>
<dict>
...
<key>PayloadDisplayName</key>
<string>Client Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.scep</string>
<key>PayloadUUID</key>
<string>CA9BE302-3AD2-4E58-B16D-2520E06493CA</string>
</dict>
</array>