Upgrade to Pro — share decks privately, control downloads, hide ads and more …

iOSDC2018-MicroMDM.pdf

Atsuya Sato
August 28, 2018
8.3k

 iOSDC2018-MicroMDM.pdf

Atsuya Sato

August 28, 2018
Tweet

More Decks by Atsuya Sato

Transcript

  1. .%.ͰԿ͕Ͱ͖Δͷ͔ ฆࣦɾ౪೉࣌ͷ ৘ใ࿙Ӯରࡦ ΞϓϦέʔγϣϯ ίϯςϯπ؅ཧ ୺຤৘ใͷऩू ϙϦγʔͷదԠ ϦϞʔτϩοΫ ϫΠϓ ޻৔ग़ՙ࣌ʹ໭͢

     ʜ౳ ΞϓϦέʔγϣϯͷ഑෍ ΞϓϦέʔγϣϯͷ࡟আ ʜ౳ 04όʔδϣϯͷऔಘ όοςϦʔঢ়ଶͷऔಘ 04Ξοϓσʔτ ʜ౳ ৄ͘͠஌Γ͍ͨํ͸ɼ"QQMFͷ.%.1SPUPDPM%PDVNFOUΛࢀর .PCJMF%FWJDF.BOBHFNFOU .%. 1SPUPDPM"QQMF%FWFMPQFS
  2. J04͸.%.Λ࣮ݱ͢ΔͨΊʹɺNENE NEN EBFNPO ͕಺෦Ͱಈ࡞͓ͯ͠Γɺ͜ΕʹΑͬͯ.%.ί Ϛϯυ͕࣮ߦͰ͖Δ J04ʹ͓͚Δ.%.ͷ࢓૊Έ ֓ཁ Aug 28 17:31:30

    testing mdmd(libdyld.dylib)[376] <Notice>: mdmd starting... Aug 28 17:31:30 testing mdmd[376] <Notice>: Starting power assertion: Start MCMDMServer ɾɾɾ Aug 28 17:31:31 testing mdmd[376] <Notice>: Valid MDM configuration found. ɾɾɾ Aug 28 17:31:31 testing mdmd[376] <Notice>: Polling MDM server https://iosdc- micromdm.tk/mdm/connect for next command. Aug 28 18:09:40 testing mdmd(CFNetwork)[429] <Notice>: TIC Enabling TLS [1:0x100e47f70] Aug 28 18:09:40 testing mdmd(CFNetwork)[429] <Notice>: TIC TCP Conn Start [1:0x100e47f70] ɾɾɾ
  3. J04ʹ͓͚Δ.%.ͷ࢓૊Έ ֓ཁ Aug 28 18:09:42 testing mdmd(libdispatch.dylib)[429] <Notice>: Transaction completed.

    Status: 200 ɾɾɾ Aug 28 17:31:31 testing mdmd[376] <Notice>: Attempting to perform Supervised request: DeviceLock ɾɾɾ Aug 28 17:31:32 testing mdmd[376] <Notice>: Command Status: Acknowledged ɾɾɾ Aug 28 17:31:32 testing mdmd[376] <Notice>: Polling MDM server https://iosdc-micromdm.tk/mdm/ connect for next command. ɾɾɾ Aug 28 17:31:33 testing mdmd(libdispatch.dylib)[376] <Notice>: Server has no commands for this device. Aug 28 18:09:45 testing mdmd(libdyld.dylib)[429] <Notice>: mdmd preparing to stop.
  4. NENϨεϙϯεʹ͍ͭͯ NJDSPNEN "1/T %FWJDF DMJFOU $BMM"1* "1/T3FRVFTU 1VTI/PUJpDBUJPO $BMMCBDL .%.$PNNBOE

    3FTQPOTF 8FCIPPL %FWJDF͔ΒͷϨεϙϯε ͸QMJTUܗࣜͰฦ٫͞ΕΔ .%.Ϩεϙϯε͸ 8FCIPPLΛ༻͍ͯ ड͚औΔ͜ͱ͕Ͱ͖Δ
  5. 8FCIPPLΛड͚औΕΔΑ͏ʹ͢Δ { "topic": "mdm.Connect", "event_id": "3444be1d-bbf0-45dc-9da3-f707beeecf1b", "created_at": "2018-08-13T14:30:16.789541405Z", "acknowledge_event": {

    "udid": "A5EF1BA1-586D-4F29-B4F3-759DADAC2DDD", "status": "Acknowledged", "command_uuid": "41d35de3-a343-4146-ba4b-0069bae2a54f", "url_params": null, "raw_payload": "PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPCFET0NUWVBFIHBsaXN0IFBVQkxJQyAiLS8v QXBwbGUvL0RURCBQTElTVCAxLjAvL0VOIiAiaHR0cDovL3d3dy5hcHBsZS5jb20vRFREcy9Qcm9wZXJ0eUxpc3QtM S4wLmR0ZCI+CjxwbGlzdCB2ZXJzaW9uPSIxLjAiPgo8ZGljdD4KCTxrZXk+Q29tbWFuZFVVSUQ8L2tleT4KCTxzdH Jpbmc+NDFkMzVkZTMtYTM0My00MTQ2LWJhNGItMDA2OWJhZTJhNTRmPC9zdHJpbmc+Cgk8a2V5PlN0YXR1czwva2V 5PgoJPHN0cmluZz5BY2tub3dsZWRnZWQ8L3N0cmluZz4KCTxrZXk+VURJRDwva2V5PgoJPHN0cmluZz5BNUVGMUJB MS01ODZELTRGMjktQjRGMy03NTlEQURBQzJEREQ8L3N0cmluZz4KPC9kaWN0Pgo8L3BsaXN0Pgo=" } } 8FCIPPLͰड͚औΕΔϦΫΤετ͸্ͷΑ͏ͳܗʹͳ͓ͬͯΓɼ BDLOPXMFEHF@FWFOUSBX@QBZMPBEʹ.%.ίϚϯυͷ݁Ռ QMJTUܗࣜ ͕#BTFΤϯίʔυ͞Εͨจࣈྻؚ͕·Ε͍ͯ·͢
  6. "1*ܦ༝Ͱ.%.ίϚϯυΛୟ͍ͯΈΔ <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"

    "http://www.apple.com/DTDs/ PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>2314e036-18e8-4854-9a9a-a21e8763ec28</string> <key>QueryResponses</key> <dict> <key>Model</key> <string>ME334J</string> <key>OSVersion</key> <string>11.3.1</string> </dict> <key>Status</key> <string>Acknowledged</string> <key>UDID</key> <string>e049c7ef3f354cde819caf2d2bbad73a490019d0</string> </dict> </plist> σόΠε͔Β͸্ͷΑ͏ͳܗࣜͰ݁Ռ͕ฦ٫͞Ε͖ͯ·͢
  7. "1*ܦ༝Ͱ.%.ίϚϯυΛୟ͍ͯΈΔ { "CommandUUID": "2314e036-18e8-4854-9a9a-a21e8763ec28", "QueryResponses": { "Model": "ME334J", "OSVersion": "11.3.1"

    }, "Status": "Acknowledged", "UDID": "e049c7ef3f354cde819caf2d2bbad73a490019d0" } +40/ܗࣜʹม׵ͨ͠΋ͷ 2VFSZ3FTQPOTFTͷதʹ.PEFMɼ047FSTJPOؚ͕·Ε͍ͯΔͷ͕෼͔ Δ