I am now studying different MDM(Mobile device management) solutions.
IOS has different way to enroll and manage devices. For push notification and OTA transmissions IOS needs separate APNS certificates for different accounts(For example: Consider any MDM SAAS vendor. Every organisations registered with them would be treated as accounts. Organisations will have there own subdomain and they need to create and update APNS certificate to receive push notification.(OTA)). Configuration profiles are used to take management actions and enforce policies.
In this page https://www.apple.com/iphone/business/it/management.html, in get started section, Apple itself has mentioned about having separate certificate for different accounts. But there are no much details about it.I have referred this article too.
But previously I have seen people using same certificate for all accounts for a specific application. Based on this question http://stackoverflow.com/questions/23383448/one-apns-certificate-for-multiple-ios-apps, if there are different applications for different accounts, then there is a point in having different certificate for each account. But there is going to be a same MDM agent and configuration profile in every IOS device, then why does it need different certificates? I am not able to find articles which answers my question.
Why does it need separate certificate for different account?
IOS has different way to enroll and manage devices. For push notification and OTA transmissions IOS needs separate APNS certificates for different accounts(For example: Consider any MDM SAAS vendor. Every organisations registered with them would be treated as accounts. Organisations will have there own subdomain and they need to create and update APNS certificate to receive push notification.(OTA)). Configuration profiles are used to take management actions and enforce policies.
In this page https://www.apple.com/iphone/business/it/management.html, in get started section, Apple itself has mentioned about having separate certificate for different accounts. But there are no much details about it.I have referred this article too.
But previously I have seen people using same certificate for all accounts for a specific application. Based on this question http://stackoverflow.com/questions/23383448/one-apns-certificate-for-multiple-ios-apps, if there are different applications for different accounts, then there is a point in having different certificate for each account. But there is going to be a same MDM agent and configuration profile in every IOS device, then why does it need different certificates? I am not able to find articles which answers my question.
Why does it need separate certificate for different account?