配置描述文件是XML 文件，包含以下內(nèi)容：設(shè)備安全策略、VPN 配置信息、Wi-Fi 設(shè)置、APN 設(shè)置、Exchange帳戶設(shè)置、郵件設(shè)置以及允許 iPhone 和 iPod touch 與企業(yè)系統(tǒng)配合使用的證書。

  “iPhone配置實(shí)用工具”可讓您輕松地創(chuàng)建、維護(hù)和安裝配置描述文件及對(duì)配置描述文件進(jìn)行加密，跟蹤和安裝預(yù)置描述文件與授權(quán)的應(yīng)用程序，以及采集包括控制臺(tái)日志在內(nèi)的設(shè)備信息。（這個(gè)工具可以從官網(wǎng)上進(jìn)行下載）

  目前所知的，安裝這個(gè)配置文件除了上述的使用“iphone配置實(shí)用工具”之外，還可以通過郵件附件或通過使用safari瀏覽包含有下載的網(wǎng)頁的方式激活安裝（install profile窗口）。

   如何能在不聯(lián)網(wǎng)的方式進(jìn)行配置文件的安裝呢？？？？這是個(gè)問題....

下面這個(gè)文章大致介紹了下配置描述文件從生成到安裝的過程：

Over-the-air IPhone Setup Using aSigned .mobileconfig File

Note: this does not push your configuration to an iPhone. Theuser of the iPhone must go to a web address and install aconfiguration profile.

   Suppose that you have a fewiPhones that you need to support, but you don't want to spend thetime typing in all of the e-mail (IMAP or POP), LDAP, wirelessnetwork, or other settings into each phone. Perhaps you have found but you don't really feellike setting up a whole SCEP Certification Authority to get thingsdone either since your requirements are so simple. But you dorealize that it is much easier to tell your user to go tohttps://example.com/iphone/ on their iPhone than to step themthrough all the individual setup routines.

   Amazingly enough, there isnot much documentation out there on how to hand-roll a.mobileconfig file that you can pass out on an HTTPS server to yourusers. We also want it to be "Verified" by the iPhone so that yourusers can see it is from you. While they can install untrustedprofiles, it sure adds a nice touch to have the greencheckmark.

   Perhaps you've scoured theInternet since you've read that you can "just use opensslsmime" to sign your .mobileconfig file, but no one seems totell you how. We'll go over that here as well.

1) Create a configuration(.mobileconfig) file

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple/DTD PLIST 1.0//EN" "<plist version="1.0">
<dict>
 <key>PayloadContent</key>
 <array>
  <dict>
   <key>PayloadDisplayName</key>
   <string>LDAP Settings</string>
   <key>PayloadType</key>
   <string>com.apple.ldap.account</string>
   <key>PayloadVersion</key>
   <integer>1</integer>
   <key>PayloadUUID</key>
   <string>6df7a612-ce0a-4b4b-bce2-7b844e3c9df0</string>
   <key>PayloadIdentifier</key>
   <string>com.example.iPhone.settings.ldap</string>
   <key>LDAPAccountDescription</key>
   <string>Company Contacts</string>
   <key>LDAPAccountHostName</key>
   <string>ldap.example.com</string>
   <key>LDAPAccountUseSSL</key>
   <false />
   <key>LDAPAccountUserName</key>
   <string>uid=username,dc=example,dc=com</string>
   <key>LDAPSearchSettings</key>
   <array>
    <dict>
     <key>LDAPSearchSettingDescription</key>
     <string>Company Contacts</string>
     <key>LDAPSearchSettingSearchBase</key>
     <string></string>
     <key>LDAPSearchSettingScope</key>
     <string>LDAPSearchSettingScopeSubtree</string>
    </dict>
    <dict>
     <key>LDAPSearchSettingDescription</key>
     <string>Sales Departments</string>
     <key>LDAPSearchSettingSearchBase</key>
     <string>ou=Sales,dc=example,dc=com</string>
     <key>LDAPSearchSettingScope</key>
     <string>LDAPSearchSettingScopeSubtree</string>
    </dict>
   </array>
  </dict>
  <dict>
   <key>PayloadDisplayName</key>
   <string>Email Settings</string>
   <key>PayloadType</key>
   <string>com.apple.mail.managed</string>
   <key>PayloadVersion</key>
   <integer>1</integer>
   <key>PayloadUUID</key>
   <string>362e5c11-a332-4dfb-b18b-f6f0aac032fd</string>
   <key>PayloadIdentifier</key>
   <string>com.example.iPhone.settings.email</string>
   <key>EmailAccountDescription</key>
   <string>Company E-mail</string>
   <key>EmailAccountName</key>
   <string>Full Name</string>
   <key>EmailAccountType</key>
   <string>EmailTypeIMAP</string>
   <key>EmailAddress</key>
   <string>username@example.com</string>
   <key>IncomingMailServerAuthentication</key>
   <string>EmailAuthPassword</string>
   <key>IncomingMailServerHostName</key>
   <string>imap.example.com</string>
   <key>IncomingMailServerUseSSL</key>
   <true />
   <key>IncomingMailServerUsername</key>
   <string>username@es2eng.com</string>
   <key>OutgoingPasswordSameAsIncomingPassword</key>
   <true />
   <key>OutgoingMailServerAuthentication</key>
   <string>EmailAuthPassword</string>
   <key>OutgoingMailServerHostName</key>
   <string>smtp.example.com</string>
   <key>OutgoingMailServerUseSSL</key>
   <true />
   <key>OutgoingMailServerUsername</key>
   <string>username@example.com</string>
  </dict>
 </array>
 <key>PayloadOrganization</key>
 <string>Your Organization's Name</string>
 <key>PayloadDisplayName</key>
 <string>Organization iPhone Settings</string>
 <key>PayloadVersion</key>
 <integer>1</integer>
 <key>PayloadUUID</key>
 <string>954e6e8b-5489-484c-9b1d-0c9b7bf18e32</string>
 <key>PayloadIdentifier</key>
 <string>com.example.iPhone.settings</string>
 <key>PayloadDescription</key>
 <string>Sets up Organization's LDAP directories and email on the iPhone</string>
 <key>PayloadType</key>
 <string>Configuration</string>
</dict>
</plist>
          

Sign the .mobileconfigfile

Serve up the file on your HTTPSserver

<IfModule mod_mime.c>        AddType application/x-apple-aspen-config .mobileconfig</IfModule>

header('Content-type: application/x-apple-aspen-config; chatset=utf-8');header('Content-Disposition: attachment; filename="company.mobileconfig"');echo $mobileconfig;

Try it out on youriPhone

Finished!

See Also