iOS get Configuration Profiles that are installed

Question

The app I am currently working on requires the use of Configuration Profiles in order to connect to a server to download XML. The certificates are distributed in the form of .p12 files, and they can be installed in the settings app in the iPhone like the bottom-left image.

The problem is that all over the internet people are saying that this is impossible.

HOWEVER, Junos Pulse can do this(bottom-right image).

It is only reading the Configuration Profiles which is exactly what I need.

I did not have to install them into the Junos Pulse app. Adding them to the system, and launching the app is enough for my profiles to be recognized.

Thanks for your help :)

Deloresdeloria

i just completed a few days of research on this, and i can tell you with certainty that it is still impossible. i'd be surprised if you find an adequate alternative. – Tripterous

Any ideas on how Junos Pulse does this? – Deloresdeloria

I did not see this solution, but where do you see that it supports iOS? – Tripterous

The Junos Pulse App has full access to the profiles. It allows the user to pick a profile for the connection, and it doesn't require a password since the user has already given it to register the profile. – Deloresdeloria

Yes. I didn't believe it either, but I downloaded it on my iPhone, and I pulled both of my 'target' certificates and was able to connect to the server without any prior setup on my part. – Deloresdeloria

so what are you asking here then? :) – Tripterous

and where did you download it from if i can ask? – Tripterous

I'm looking for the method that Junos Pulse uses to get the list of profiles. I need to get the list, let the user pick one(if there are multiple), then use it. – Deloresdeloria

'Junos Pulse' in the app store, or itunes.apple.com/ca/app/junos-pulse/id381348546?mt=8 – Deloresdeloria

@NSArray - I'm also looking similar to your problem statement of reading the configuration profile. Did you find a solution? – Agnew

@Agnew - I contacted apple a while ago to inquire about getting the permissions required to access the certificates, and they said that they will not grant me such permission because of what my app was being used for. However, if the app is used within a company they may consider allowing it as long as it is not distributed externally. (There are many conditions which they take into consideration) – Deloresdeloria

Answer 1

You won't. Your application is sandboxed, read the iOS App Programming Guide. Developer profiles are not public information for applications to access.

Cense

So how does Junos Pulse do it? – Deloresdeloria

It looks like you have to manually enter them. I just installed the app and I don't see any of my profiles anywhere. – Cense

If you go Configuration -> Add new configuration -> Certificate, there will be a list of every certificate installed. – Deloresdeloria

My certificates are .p12 files designed for server authentication. I just confirmed that the order of installation doesn't matter. – Deloresdeloria

MDM client apps can view them actually. So, not the usual apps – Corporeal

My, how things have changed in the past 5 years! – Cense

Answer 2

The reason the Junos app is able to do this has been explained in a post in the Apple Developer Forums.

Original Question: https://devforums.apple.com/message/660579#660579

Explanation about Junos app: https://devforums.apple.com/message/351326#351326

To sum it up, access to this is not provided in the SDK and is by invitation from Apple only.

Acidforming

Answer 3

I am not sure what you are trying to accomplish, but the iOS Keychain services allows you to store and retrieve certificates and keys in a (supposedly) secure way. I have not used the API for other than storing passwords, so I cannot say how it works with certificates, but according to the docs it might work for you.

In particular, have a look at the SecItemCopyMatching function.

Joaquin