Hi all, We've been given the opportunity to beta test an app at my school and we have been asked to download the Test Flight app to enable it to run. Unfortunately it's not possible to use Test Flight with a managed Apple ID. All our staff and pupils' iPads are signed in with a managed Apple ID. It's a shame to pass up this opportunity, but I can't see any way around it... does anyone have any alternatives (apart from creating and using a non-managed Apple ID, which isn't feasible). Thanks in advance, Jacob

When I trusted my certificate in 'Setting'->'VPN & Device Management', my device reboot automatically. After reboot, it showed that "developer of My Team is not trusted in this iPhone", but the app is "verified" in the second column. The UI looks like: iOS18 beta: First Col: Trust "My Team" Second Col: MyApp Verified Other versions: First Col: Delete App Second Col: MyApp Verified What's more, my app has plugins(extensions), my app can run normally while the extension is not able to be pulled up on iOS18 beta.

Hi,Team: I successfully installed the system extension through MDM and want to uninstall it through RemovableSystemExtensions, but this command does not support versions below macOS 12. Is there any other way to pause or uninstall the system extension? Can I delete the configuration file that allows system extensions through MDM? Or send and delete the configuration file of AllowedSystemExtensions?

Hi, Team: I developed a network filter and used MDM to issue a description file. By configuring AllowedSystemExtensions, I can avoid the reminder of loading system extensions during installation. However, when savingToPreferencesWithCompletionHandler, I will still be reminded that my network data is monitored. How can I configure MDM to avoid this reminder? And why can I still delete the filter from the network filter conditions even though I configured it in mobileconfig in the following way. NonRemovableFromUISystemExtensions com.mysystemextensionid

Hi, I am using the Create Report functions under Payments and Financial Reports. Does anyone know what is the time zone that Apple use for that report?

Hello, I have received Enterprise.license from Apple and I am trying to implement main Camera access for Vision Pro by following https://developer.apple.com/videos/play/wwdc2024/10139/. Here is my camera function. func takePicture() async { let formats = CameraVideoFormat.supportedVideoFormats(for: .main, cameraPositions:[.left]) let cameraFrameProvider = CameraFrameProvider() var arKitSession = ARKitSession() var pixelBuffer: CVPixelBuffer? await arKitSession.queryAuthorization(for: [.cameraAccess]) do { try await arKitSession.run([cameraFrameProvider]) } catch { return } guard let cameraFrameUpdates = cameraFrameProvider.cameraFrameUpdates(for: formats[0]) else { return } for await cameraFrame in cameraFrameUpdates { guard let mainCameraSample = cameraFrame.sample(for: .left) else { continue } pixelBuffer = mainCameraSample.pixelBuffer let image = UIImage(ciImage: CIImage(cvPixelBuffer: pixelBuffer!)) print(image) UIImageWriteToSavedPhotosAlbum(image, nil, nil, nil) } } } My problem is debug stops at this line. guard let cameraFrameUpdates = cameraFrameProvider.cameraFrameUpdates(for: formats[0]) else { return } Why does it happen so and what else do I need to do?

Hello, We are trying to use the Managed App Distribution framework with our mdm following the documentation here : https://developer.apple.com/documentation/managedappdistribution But on the first load we don't get anything, the app keep getting stuck inside the following code without sending an error or getting the managed apps for try await result in ManagedAppLibrary.currentDistributor.availableApps { content = try result.get().map(Content.managedApp) } If we update the list of available managed apps in our mdm, the function execute and so we have all the apps displayed as expected, but if we close and re-open the app it'll again not display anything until we update the managed apps list. How can we fetched our managed apps at anytime and not only when the list is updated ? Why this method seems to be waiting for an update instead of just fetching the available managed apps when we call it ?

The customer's ABM account has been locked，i can't get token with DEP Server Token.Is there any ways to release device from ABM with some api or softwares. I hope no remote management page during the activation process settings after i restore factory settings. Thanks in advance.

In MDM Software Update settings(https://developer.apple.com/documentation/devicemanagement/softwareupdate), there is a key "restrict-software-update-require-admin-to-install" which apparently controls if the standard users are allowed to install apps and software updates. But so far, even if this is set to true, a standard user is able to download apps from Appstore. We noticed that when we publish a pkg to be installed via MDM, then that does not get installed if the above setting is set to true. Please provide clarity on what this setting controls.

Is there any good framework that can be used in educational app as Learning Management System (LMS). Should be full fledge for creating courseware for E Learning App. Should be compatible with all Apple Platforms. Any help or link will be greatly appreciated. As I didn't found anything that mentions designed for Xcode. All LMS belong to Web based apps.

In the latest macOS 15 system, we've noted that end users have the capability to disable and prevent the launch of system extensions via system settings. I'm curious to know whether Apple plans to offer MDM configurations to deter end users from performing such actions.

We have encountered an issue while developing our own Apple MDM solution. The issue occurs in the activation lock scenario. We have implemented the activation and deactivation of the activation lock feature in accordance with the following documentation. 1:https://developer.apple.com/documentation/devicemanagement/activation_lock_a_device 2:https://developer.apple.com/documentation/devicemanagement/device_assignment/activation_lock_a_device/creating_and_using_bypass_codes#3734453 Activationlock Request URI : https://mdmenrollment.apple.com/device/activationlock Request Method : POST Request Headers : [Accept:"text/plain, application/json, application/*+json, /", X-ADM-Auth-Session:"1723449441118O1O649496FAD285FDC77565EC075E770547O90695212BB76419F8E43B2F68BE7A6C6O67033512O11Op1OA0EA85747E70D2D6941C4F6662166CAF22C2193COC298C61ECC7B9E9C14EB2A20305F7E41", X-Server-Protocol-Version:"3", Content-Type:"application/json", Content-Length:"133"] Request Body : {"device":"K2LP4HQXJ4","escrow_key":"QRV7D-JPPMQ-Z90N-1VN8-L1PN-45Q2","lost_message":"xxxxx"} Response : {"serial_number":"K2LP4HQXJ4","response_status":"SUCCESS"} escrowKeyUnlock Request URI : https://deviceservices-external.apple.com/deviceservicesworkers/escrowKeyUnlock?serial=K2LP4HQXJ4&imei=357174298879232&meid=35717429887923&productType=iPhone14,2 Request Method : POST Request Headers : [Accept:"text/plain, application/json, application/*+json, /", Content-Type:"application/x-www-form-urlencoded", Content-Length:"189"] Request Body : orgName=xxxxx&guid=xxxxx&escrowKey=QRV7D-JPPMQ-Z90N-1VN8-L1PN-45Q2 Response : 404 <ns:escrowKeyDeviceServicesResponse version="1" xmlns:ns="http://www.apple.com/cds/mdmescrowKeyDeviceServices/xml"></ns:escrowKeyDeviceServicesResponse> Who can help me check if there are any errors in the way I'm calling these two APIs, and how to correct them?

I use then interface https://developer.apple.com/documentation/devicemanagement/device_assignment/activation_lock_a_device/creating_and_using_bypass_codes#3734453 to remove Activation Lock。 request url：https://deviceservices-external.apple.com/deviceservicesworkers/escrowKeyUnlock?serial=***&productType=***&imei=***&meid=*** then body is escrowKey、orgName、guid and use APNs certificate when establishing the SSL connection but return me：<ns:escrowKeyDeviceServicesResponse version="1" xmlns:ns="http://www.apple.com/cds/mdmescrowKeyDeviceServices/xml"></ns:escrowKeyDeviceServicesResponse>

Hi. I'm trying to use the following command to set a wallpaper on an iPhone : /usr/local/bin/cfgutil -K "/Users/ladmin/Downloads/privateKey.der" -C "/Users/ladmin/Downloads/publicCert.der" --ecid 0xE64120151001E set-wallpaper -s home "/Users/ladmin/Downloads/mickey-iPhone-12-Pro-12-wallpaper.png" The answer is always : --- Summary --- Operation "set-wallpaper" failed on 1 devices. cfgutil: error: An internal error occurred. Unknown service request error. (Domain: ConfigurationUtilityKit.error Code: 100) The same type of command works with an iPad. Apple Configurator 2 can set the wallpaper on the iPhone. Is there something different to do with cfgutil when setting a wallpaper on an iPhone ? Thanks for your insights ! Franck

Currently system extension need to be activate through an .app, and then need to manual allow in System Settings, Privacy and Security Pane with root user password How to install driver extension/system extension without any manual user click and just to install and allow all the permission using script?

I would like to inquire if I can use screenshots from maps for specific areas in my application. I plan to add various markers to the screenshots, which can be clicked to identify different types of areas, such as restaurants and bars. Do I need a separate permission for this, and if so, where can I obtain it? Is it possible to implement this, and what copyright considerations do I need to take into account for my business idea?

The Check-in API is now used for declarative device management in addition to MDM authentication and token updates. We would like to set a different endpoint for DDM requests only than for MDM authentication So is it possible to configure different Check-in API endpoint for MDM and DDM? For example, we would like to split the endpoints as follows Endpoints for MDM authentication and token update yourmdmhost.example.com/checkin Endpoint for DDM yourmdmhost.example.com/ddm-chcekin Check-in API Documentation https://developer.apple.com/documentation/devicemanagement/check-in

Yesterday, OpenSSH disclosed a critical RCE vulnerability that affects all instances of OpenSSH and released a patch to fix this vulnerability. As a result, do we have any official word from Apple as to when this vulnerability will be fixed? This weakness exposes every macOS device without a strict firewall configured. Reading Link: https://thehackernews.com/2024/07/new-openssh-vulnerability-could-lead-to.html

what is the solution? Process: Bluebook [801] Path: /Applications/Bluebook.app/Contents/MacOS/Bluebook Identifier: org.collegeboard.bluebook Version: 1.13.1 (1077) App Item ID: 1645016851 App External ID: 867444785 Code Type: X86-64 (Native) Parent Process: ??? [1] Responsible: Bluebook [801] User ID: 501 Date/Time: 2024-08-05 02:29:59.241 +0500 OS Version: macOS 11.7.10 (20G1427) Report Version: 12 Anonymous UUID: C3EAD369-FD01-83EA-E8E5-9651AF86A6B6 Time Awake Since Boot: 1000 seconds System Integrity Protection: enabled Crashed Thread: 1 Dispatch queue: com.apple.root.utility-qos Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000000 Exception Note: EXC_CORPSE_NOTIFY Termination Signal: Segmentation fault: 11 Termination Reason: Namespace SIGNAL, Code 0xb Terminating Process: exc handler [801] VM Regions Near 0: --> __TEXT 108d70000-108e5f000 [ 956K] r-x/r-x SM=COW /Applications/Bluebook.app/Contents/MacOS/Bluebook Thread 0:: Dispatch queue: com.apple.root.user-interactive-qos 0 libsystem_kernel.dylib 0x00007fff206689ce __ulock_wait + 10 1 libdispatch.dylib 0x00007fff204f2fd7 _dlock_wait + 44 2 libdispatch.dylib 0x00007fff204f2e67 _dispatch_thread_event_wait_slow + 40 3 libdispatch.dylib 0x00007fff205040d4 _dispatch_apply_invoke_and_wait + 264 4 libdispatch.dylib 0x00007fff20503b97 dispatch_apply_f + 787 5 com.apple.CoreFoundation 0x00007fff20899e5c __104-[CFPrefsSearchListSource synchronouslySendDaemonMessage:andAgentMessage:andDirectMessage:replyHandler:]_block_invoke.81 + 97 6 com.apple.CoreFoundation 0x00007fff2074bfcf CFPREFERENCES_IS_WAITING_FOR_SYSTEM_AND_USER_CFPREFSDS + 74 7 com.apple.CoreFoundation 0x00007fff2074be6f -[CFPrefsSearchListSource synchronouslySendDaemonMessage:andAgentMessage:andDirectMessage:replyHandler:] + 181 8 com.apple.CoreFoundation 0x00007fff2074a915 -[CFPrefsSearchListSource alreadylocked_generationCountFromListOfSources:count:] + 220 9 com.apple.CoreFoundation 0x00007fff2074a64f -[CFPrefsSearchListSource alreadylocked_getDictionary:] + 391 10 com.apple.CoreFoundation 0x00007fff20787dfd -[CFPrefsSearchListSource addPreferencesObserver:] + 125 11 com.apple.CoreFoundation 0x00007fff2074298a __108-[_CFXPreferences(SearchListAdditions) withSearchListForIdentifier:container:cloudConfigurationURL:perform:]_block_invoke + 361 12 com.apple.CoreFoundation 0x00007fff2089a621 -[_CFXPreferences withSearchListForIdentifier:container:cloudConfigurationURL:perform:] + 372 13 com.apple.CoreFoundation 0x00007fff20787cf5 -[_CFXPreferences registerUserDefaultsInstance:configurationURL:] + 142 14 com.apple.CoreFoundation 0x00007fff20787c35 _CFPrefsRegisterUserDefaultsInstanceWithCloudConfigurationURL + 84 15 com.apple.Foundation 0x00007fff214db2f2 _NSKeyValueReplaceObservationInfoForObject + 125 16 com.apple.Foundation 0x00007fff214da481 -[NSObject(NSKeyValueObserverRegistration) _addObserver:forProperty:options:context:] + 471 17 com.apple.Foundation 0x00007fff214d981a -[NSObject(NSKeyValueObserverRegistration) addObserver:forKeyPath:options:context:] + 93 18 com.apple.WebKit 0x00007fff3c8f49bb -[WKWebInspectorPreferenceObserver init] + 147 19 com.apple.WebKit 0x00007fff3c8f491f +[WKWebInspectorPreferenceObserver sharedInstance] + 29 20 com.apple.WebKit 0x00007fff3c6c0e55 WebKit::WebProcessPool::WebProcessPool(API::ProcessPoolConfiguration&) + 2185 21 com.apple.WebKit 0x00007fff3c56ed8f -[WKProcessPool _initWithConfiguration:] + 91 22 com.apple.WebKit 0x00007fff3c56edcd -[WKProcessPool init] + 44 23 com.apple.WebKit 0x00007fff3c58621e -[WKWebViewConfiguration processPool] + 27 24 com.apple.WebKit 0x00007fff3c585dd9 -[WKWebViewConfiguration copyWithZone:] + 145 25 com.apple.WebKit 0x00007fff3c57b541 -[WKWebView initializeWithConfiguration:] + 86 26 com.apple.WebKit 0x00007fff3c57c936 -[WKWebView initWithFrame:configuration:] + 98 27 org.collegeboard.bluebook 0x0000000108d78be2 0x108d70000 + 35810 28 org.collegeboard.bluebook 0x0000000108d89a56 0x108d70000 + 105046 29 org.collegeboard.bluebook 0x0000000108d7250b 0x108d70000 + 9483 30 com.apple.SwiftUI 0x00007fff4282d3f5 FallbackDelegateBox.delegate.getter + 63 31 com.apple.SwiftUI 0x00007fff422b35e0 AppDelegate.init(appGraph:) + 196 32 com.apple.SwiftUI 0x00007fff427ee154 runApp(:) + 154 33 com.apple.SwiftUI 0x00007fff423d7d31 static App.main() + 61 34 org.collegeboard.bluebook 0x0000000108d74216 0x108d70000 + 16918 35 libdyld.dylib 0x00007fff206b7f3d start + 1

Hi Does anyone know why the ‘allowVPNcreation’ restriction available to supervised devices doesn’t apply to third-party apps? This Support page says it should: https://support.apple.com/en-gb/guide/deployment/dep0f7dd3d8/web Thanks