{"id":12762,"date":"2019-04-17T13:58:59","date_gmt":"2019-04-17T05:58:59","guid":{"rendered":"http:\/\/i-services.info\/wordpress\/?p=12762"},"modified":"2020-04-15T10:05:36","modified_gmt":"2020-04-15T02:05:36","slug":"%e3%80%90apple-mdm%e3%80%91apple-mdm-apns%e7%9a%84%e9%81%8b%e4%bd%9c%e6%b5%81%e7%a8%8b%e8%aa%aa%e6%98%8e-2","status":"publish","type":"post","link":"http:\/\/i-services.info\/wordpress\/?p=12762","title":{"rendered":"\u3010Apple MDM\u3011Apple MDM &amp; APNs\u7684\u904b\u4f5c\u6d41\u7a0b\u8aaa\u660e"},"content":{"rendered":"<p>&nbsp;<\/p>\n<p><strong><font color=\"#0000ff\">\u4e00\u3001APNs \u7684\u904b\u4f5c\u6d41\u7a0b\uff1a<\/font><\/strong>  <\/p>\n<p>&#8211; MDM Server \u6703\u9700\u8981 outbound TCP port 2195, 2196, 2197 \u5411 17.0.0.0\/8 \u7684 APNs server \u53d6\u5f97\u670d\u52d9\u3002  <\/p>\n<p>&#8211; Mac\/iOS \u8a2d\u5099\u6703\u9700\u8981 outbound TCP port 5223 \u5411 17.0.0.0\/8 \u7684 APNs server \u53d6\u5f97\u670d\u52d9\u3002  <\/p>\n<p>&#8211; \u7576\u9023\u4e0a\u7db2\u8def Mac\/iOS \u8a2d\u5099 trigger \u548c APNs server \u7684\u9023\u7d50\u3002  <\/p>\n<p>&#8211; APNs \u4f7f\u7528 XMPP over SSL \u900f\u904e TCP port 5223 \u904b\u4f5c\u3002(\u9019\u500b\u4e0d\u80fd\u4f7f\u7528 proxy)  <\/p>\n<p>&#8211; \u555f\u59cb TCP \u9023\u7d50\u3002( APNs &#8211; TCP 5223, ActiveSync &#8211; TCP 443 )  <\/p>\n<p>&#8211; \u6240\u6709\u901a\u8a0a\u90fd\u6703\u900f\u904e\u9019\u500b TCP channel \u9032\u884c\u3002  <\/p>\n<p>&#8211; Mac\/iOS \u88dd\u7f6e\u53ea\u8981\u6709 internet \u9023\u7dda\u4fbf\u6703\u6301\u7e8c\u7684\u548c APNs \u4fdd\u6301\u9023\u7dda\u3002  <\/p>\n<p>&#8211; \u7576 MDM server \u9700\u8981\u548c Mac\/iOS \u8a2d\u5099\u6e9d\u901a\u6642\uff0cMDM server \u6703\u5411 APNs \u9001\u51fa\u8acb\u6c42\uff0c\u8b93 APNs server \u63a8\u64ad\u547d\u4ee4\u5230 Mac\/iOS \u88dd\u7f6e\u3002  <\/p>\n<p>&#8211; \u5982\u679c\u6709\u6e05\u9664\u88dd\u7f6e\u6216\u662f\u522a\u9664\u4efb\u4f55\u6771\u897f\uff0c Mac\/iOS \u88dd\u7f6e\u6703\u7acb\u5373\u57f7\u884c\u3002  <\/p>\n<p>&#8211; \u5982\u679c\u547d\u4ee4\u662f\u8981\u767b\u51fa\u6216\u662f\u9032\u884c\u4e0b\u8f09\uff0cMac\/iOS \u88dd\u7f6e\u6703\u9023\u900f\u904e SSL TCP 443&nbsp; port \u548c MDM server \u9032\u884c\u6e9d\u901a\u3002  <\/p>\n<p>&nbsp; <\/p>\n<p><strong>\u8acb\u53c3\u8003\u4e0b\u5217\u6574\u500b\u884c\u52d5\u88dd\u7f6e\u7ba1\u7406\u7684\u6d41\u7a0b\u8aaa\u660e\uff1a<\/strong>  <\/p>\n<p>Step 0\uff1aiPad\u3001MDM Server &amp; APNs\u67b6\u69cb\u6d41\u7a0b<\/p>\n<p><a href=\"http:\/\/i-services.info\/wordpress\/wp-content\/uploads\/2019\/04\/clip_image002.jpg\"><img loading=\"lazy\" title=\"clip_image002\" style=\"border-left-width: 0px; border-right-width: 0px; background-image: none; border-bottom-width: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-top-width: 0px\" border=\"0\" alt=\"clip_image002\" src=\"http:\/\/i-services.info\/wordpress\/wp-content\/uploads\/2019\/04\/clip_image002_thumb.jpg\" width=\"675\" height=\"351\"><\/a><\/p>\n<p>&nbsp; <\/p>\n<p>Step 1\uff1a\u542b\u6709MDM\u4f3a\u670d\u5668\u8cc7\u8a0a\u7684\u8a2d\u5b9a\u63cf\u8ff0\u6a94\u50b3\u9001\u5230\u88dd\u7f6e\u3002(\u986f\u2f70\u793a\u8cc7\u8a0a\u7d66\u4f7f\u2f64\u7528\u8005\uff0c\u8aaa\u660e\u4f3a\u670d\u5668\u6703\u7ba1\u7406\u6216\u67e5\u8a62\u54ea\u4e9b\u9805\u76ee)\u3002  <\/p>\n<p><a href=\"http:\/\/i-services.info\/wordpress\/wp-content\/uploads\/2019\/04\/clip_image004.jpg\"><img loading=\"lazy\" title=\"clip_image004\" style=\"border-left-width: 0px; border-right-width: 0px; background-image: none; border-bottom-width: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-top-width: 0px\" border=\"0\" alt=\"clip_image004\" src=\"http:\/\/i-services.info\/wordpress\/wp-content\/uploads\/2019\/04\/clip_image004_thumb.jpg\" width=\"675\" height=\"353\"><\/a>  <\/p>\n<p>&nbsp; <\/p>\n<p>Step 2\uff1a\u4f7f\u2f64\u7528\u8005\u5b89\u88dd\u63cf\u8ff0\u6a94\uff0c\u9078\u64c7\u8b93\u88dd\u7f6e\u63a5\u53d7\u7ba1\u7406\u3002  <\/p>\n<p><a href=\"http:\/\/i-services.info\/wordpress\/wp-content\/uploads\/2019\/04\/clip_image006.jpg\"><img loading=\"lazy\" title=\"clip_image006\" style=\"border-left-width: 0px; border-right-width: 0px; background-image: none; border-bottom-width: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-top-width: 0px\" border=\"0\" alt=\"clip_image006\" src=\"http:\/\/i-services.info\/wordpress\/wp-content\/uploads\/2019\/04\/clip_image006_thumb.jpg\" width=\"674\" height=\"342\"><\/a>  <\/p>\n<p>&nbsp; <\/p>\n<p>Step 3\uff1a\u88dd\u7f6e\u767b\u8a18\u6703\u5728\u5b89\u88dd\u63cf\u8ff0\u6a94\u6642\u9032\u2f8f\u884c\u3002\u4f3a\u670d\u5668\u6703\u9a57\u8b49\u88dd\u7f6e\u4e26\u5141\u8a31\u5b58\u53d6\u3002  <\/p>\n<p><a href=\"http:\/\/i-services.info\/wordpress\/wp-content\/uploads\/2019\/04\/clip_image008.jpg\"><img loading=\"lazy\" title=\"clip_image008\" style=\"border-left-width: 0px; border-right-width: 0px; background-image: none; border-bottom-width: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-top-width: 0px\" border=\"0\" alt=\"clip_image008\" src=\"http:\/\/i-services.info\/wordpress\/wp-content\/uploads\/2019\/04\/clip_image008_thumb.jpg\" width=\"675\" height=\"342\"><\/a>  <\/p>\n<p>&nbsp; <\/p>\n<p>Step 4\uff1a\u4f3a\u670d\u5668\u6703\u50b3\u9001\u63a8\u64ad\u901a\u77e5\uff0c\u8981\u6c42\u88dd\u7f6e\u767b\u5165\u5de5\u4f5c\u6216\u67e5\u8a62\u3002  <\/p>\n<p><a href=\"http:\/\/i-services.info\/wordpress\/wp-content\/uploads\/2019\/04\/clip_image010.jpg\"><img loading=\"lazy\" title=\"clip_image010\" style=\"border-left-width: 0px; border-right-width: 0px; background-image: none; border-bottom-width: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-top-width: 0px\" border=\"0\" alt=\"clip_image010\" src=\"http:\/\/i-services.info\/wordpress\/wp-content\/uploads\/2019\/04\/clip_image010_thumb.jpg\" width=\"675\" height=\"343\"><\/a>  <\/p>\n<p>&nbsp; <\/p>\n<p>Step 5\uff1a\u88dd\u7f6e\u662f\u900f\u904e HTTPS \u76f4\u63a5\u9023\u7dda\u5230\u4f3a\u670d\u5668\uff0c\u4f3a\u670d\u5668\u6703\u50b3\u9001\u6307\u4ee4\u6216\u8981\u6c42\u8cc7\u8a0a\u3002  <\/p>\n<p><a href=\"http:\/\/i-services.info\/wordpress\/wp-content\/uploads\/2019\/04\/clip_image012.jpg\"><img loading=\"lazy\" title=\"clip_image012\" style=\"border-left-width: 0px; border-right-width: 0px; background-image: none; border-bottom-width: 0px; padding-top: 0px; padding-left: 0px; display: inline; padding-right: 0px; border-top-width: 0px\" border=\"0\" alt=\"clip_image012\" src=\"http:\/\/i-services.info\/wordpress\/wp-content\/uploads\/2019\/04\/clip_image012_thumb.jpg\" width=\"675\" height=\"346\"><\/a>  <\/p>\n<p>&nbsp; <\/p>\n<p>\u66f4\u591a\u8cc7\u8a0a\uff0c\u8acb\u53c3\u8003\u4ee5\u4e0b\u9023\u7d50\uff1a  <\/p>\n<p><a href=\"http:\/\/developer.apple.com\/library\/ios\/#technotes\/tn2265\/_index.html\">http:\/\/developer.apple.com\/library\/ios\/#technotes\/tn2265\/_index.html<\/a>  <\/p>\n<p><a href=\"http:\/\/developer.apple.com\/library\/mac\/#documentation\/NetworkingInternet\/Conceptual\/RemoteNotificationsPG\/ApplePushService\/ApplePushService.html\">http:\/\/developer.apple.com\/library\/mac\/#documentation\/NetworkingInternet\/Conceptual\/RemoteNotificationsPG\/ApplePushService\/ApplePushService.html<\/a>  <\/p>\n<p>&nbsp; <\/p>\n<p>&nbsp; <\/p>\n<p><strong><font color=\"#0000ff\">\u4e8c\u3001\u8a73\u7d30 APNs \u5c01\u5305\u5167\u5bb9\uff1a<\/font><\/strong>  <\/p>\n<p>&#8211; APNs \u4f7f\u7528 XMPP over SSL\uff0c\u6240\u6709\u7684\u5c01\u5305\u662f\u52a0\u5bc6\u904e\u7684\uff0c\u9632\u706b\u7246\u53ea\u77e5\u9053\u5b83\u662f\u4e00\u500b SSL \u5c01\u5305\u3002  <\/p>\n<p>&nbsp; <\/p>\n<p>&nbsp; <\/p>\n<p><strong><font color=\"#0000ff\">\u4e09\u3001Mac\/iOS \u88dd\u7f6e\u3001MDM\u3001APNs \u6e9d\u901a\u7684\u983b\u7387\uff1a<\/font><\/strong>  <\/p>\n<p>&#8211; \u7576 iOS \u88dd\u7f6e\u548c APNs server \u9023\u63a5\u6642\uff0c\u4e0d\u6703\u6709\u548c MDM server \u9023\u63a5\u6216\u662f\u52d5\u4f5c\uff0c\u5982\u679c\u6c92\u6709\u5f9e MDM server \u51fa\u4f86\u7684\u547d\u4ee4\uff0c\u9632\u706b\u7246\u53ea\u6703\u770b\u5230\u548c 17.0.0.0\/8 \u4e2d\u7684 server \u4fdd\u6301\u9023\u7dda\u7684\u9023\u63a5\u3002  <\/p>\n<p>&nbsp; <\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;  <\/p>\n<p>&nbsp; <\/p>\n<p><strong><font color=\"#ff0000\">\u4ee5\u4e0b\u8a0a\u606f\u5e0c\u671b\u6b32\u63a1\u7528Apple MDM\u7684\u7d44\u7e54\u55ae\u4f4d\u6240\u80fd\u77e5\u6089\u4e26\u7406\u89e3\u7684\u2026<\/font><\/strong>  <\/p>\n<p>&nbsp; <\/p>\n<p>1. \u9632\u706b\u7246\u9700\u8981\u958b\u5553 outbound TCP 2195, 2196, 2197, 5223 port (17.0.0.0\/8)  <\/p>\n<p>&#8211; \u9019\u662f\u4e00\u500b outbound \u800c\u4e14\u7d93\u7531\u7279\u5b9a\u7684 port \u9023\u5411\u860b\u679c\u7db2\u8def\uff0c\u4f7f\u7528\u8005\u9664\u4e86 APNs \u4e4b\u5916\u7121\u6cd5\u958b\u555f\u5176\u5b83\u9023\u63a5\u3002  <\/p>\n<p>&nbsp; <\/p>\n<p>2. Mac\/iOS \u88dd\u7f6e\u9700\u8981\u4f7f\u7528\u860b\u679c\u6191\u8b49\u900f\u904e XMPP over SSL \u548c APNs server (17.0.0.0\/8) \u9023\u63a5  <\/p>\n<p>&#8211; \u9019\u500b\u67b6\u69cb\u78ba\u4fdd\u6240\u6709\u7684 APNs \u90fd\u662f\u548c\u5408\u6cd5\u6b63\u78ba\u7684 Apple APNs server \u9023\u7d50\u3002  <\/p>\n<p>&nbsp; <\/p>\n<p>3. \u56e0\u70ba\u4e0d\u6703\u6709 inbound \u9023\u7d50\uff0c\u6240\u4ee5\u9019\u907f\u514d\u4e86\u4efb\u4f55\u6f5b\u85cf\u7684\u8cc7\u5b89\u6b3a\u9a19\u6216\u662f\u653b\u64ca\uff0c\u800c\u4e14\u6240\u6709\u7684\u6d41\u91cf\u7684\u5efa\u7acb\u9700\u8981\u4f7f\u7528\u4fe1\u4efb\u7684\u6191\u8b49\u8207\u6388\u6b0a\u3002  <\/p>\n<p>&nbsp; <\/p>\n<p>4.&nbsp; \u5982\u679c\u9084\u662f\u64d4\u5fc3\uff0c\u53ef\u4ee5\u7528 IDS\/IPS \u4f86\u76e3\u63a7 TCP 5223 port  <\/p>\n<p>&#8211; TCP 5223 port \u901a\u5e38\u53ea\u6703\u6709\u4f4e\u6d41\u91cf\u3002  <\/p>\n<p>&#8211; \u53ef\u4ee5\u8a2d\u5b9a\u9632\u706b\u7246\u53ea\u8981\u6709\u4e0d\u5c0b\u5e38\u7684\u6d41\u91cf\u4fbf\u95dc\u9589\u6574\u500b\u9023\u7d50\u3002  <\/p>\n<p>&nbsp; <\/p>\n<p>5. \u8acb\u4fe1\u4efb\u860b\u679c\u548c\u860b\u679c\u8058\u4efb\u7684\u7db2\u8def\u5c08\u5bb6\u53ca\u78ba\u4fdd\u4f01\u696d\u7db2\u8def\u8cc7\u8a0a\u5b89\u5168\u7684 guideline\u3001policy\u3001checklist\u3002<\/p>\n<div class=\"linkwithin_hook\" id=\"http:\/\/i-services.info\/wordpress\/?p=12762\"><\/div><script>\n<!-- \/\/LinkWithinCodeStart\nvar linkwithin_site_id = 2246677;\nvar linkwithin_div_class = \"linkwithin_hook\";\n\/\/LinkWithinCodeEnd -->\n<\/script>\n<script src=\"http:\/\/www.linkwithin.com\/widget.js\"><\/script>\n<a href=\"http:\/\/www.linkwithin.com\/\"><img src=\"http:\/\/www.linkwithin.com\/pixel.png\" alt=\"Related Posts Plugin for WordPress, Blogger...\" style=\"border: 0\" \/><\/a>","protected":false},"excerpt":{"rendered":"<p>&nbsp; \u4e00\u3001APNs \u7684\u904b\u4f5c\u6d41\u7a0b\uff1a &#8211; MDM Server \u6703\u9700\u8981 outbound TCP port 2195, 2196, 2197 \u5411 17.0.0.0\/8 \u7684 APNs server \u53d6\u5f97\u670d\u52d9\u3002 &#8211; &#46;&#46;&#46;<\/p>\n<script>\n<!-- \/\/LinkWithinCodeStart\nvar linkwithin_site_id = 2246677;\nvar linkwithin_div_class = \"linkwithin_hook\";\n\/\/LinkWithinCodeEnd -->\n<\/script>\n<script src=\"http:\/\/www.linkwithin.com\/widget.js\"><\/script>\n<a href=\"http:\/\/www.linkwithin.com\/\"><img src=\"http:\/\/www.linkwithin.com\/pixel.png\" alt=\"Related Posts Plugin for WordPress, Blogger...\" style=\"border: 0\" \/><\/a>","protected":false},"author":4,"featured_media":12751,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[156],"tags":[],"_links":{"self":[{"href":"http:\/\/i-services.info\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/12762"}],"collection":[{"href":"http:\/\/i-services.info\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/i-services.info\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/i-services.info\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/i-services.info\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=12762"}],"version-history":[{"count":0,"href":"http:\/\/i-services.info\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/12762\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/i-services.info\/wordpress\/index.php?rest_route=\/wp\/v2\/media\/12751"}],"wp:attachment":[{"href":"http:\/\/i-services.info\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=12762"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/i-services.info\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=12762"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/i-services.info\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=12762"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}