[{"data":1,"prerenderedAt":313},["ShallowReactive",2],{"project-18115256":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":29,"sentiment":30,"stance_mix":31,"scored_comments":35,"aspects":36,"strip":40,"post_text":43,"what":44,"said":65,"maker_in_thread":153,"shape":162,"grid":166,"attempts":275,"same_week":276,"maker_shows":34,"maker_hidden":305,"reader_version":306,"card":307},"18115256","MicroMDM","Open Source MDM Server for Apple Devices","title","Show HN: MicroMDM – Open Source MDM Server for Apple Devices","https:\u002F\u002Fmicromdm.io\u002F","micromdm.io","zalmoxes",1538417588,2018,146,47,275,2155,13,"notable","infrastructure","device management server","api",[24,25,26,27,28],"mdm","apple devices","device management","open source","macos","curious",0.076,{"positive":32,"neutral":33,"mixed":34,"critical":34},2,12,1,16,{"privacy":37,"idea":39},{"positive":38,"critical":34},0,{"positive":32,"critical":38},[38,41,38,41,38,41,41,38,34,38,41,41,38,41,38,38,38,38,38,38,38,41,41,38,38,41,38,38,42,38,38,38,38,38,38,38,42,41,41,38],3,5,null,{"problem":45,"audience":54,"pricing":43,"motivation":43,"time_to_build":43,"stack":61,"openness":62,"stage":63,"team_size":64},{"value":46,"source":47,"evidence":48},"Managing Apple devices in enterprise environments via MDM","maker",[49,51],{"id":50},"post",{"id":52,"by":11,"text":53},"18115993","Hi, I'm the author(along with several other developers). MicroMDM is used in some enterprise environments and was recently mentioned in a number of security presentations…",{"value":55,"source":47,"evidence":56},"Enterprise IT teams managing Apple devices",[57,58],{"id":52,"by":11,"text":53},{"id":59,"by":11,"text":60},"18115703","The server is only meant for enterprise deployments. It would be pretty hard to do this on a personal level because you need to apply for an enterprise account with Apple, and…",[],"open_source","launched","team",{"praise":66,"objections":79,"requests":98,"questions":110,"alternatives":125},[67],{"value":68,"source":69,"evidence":70},"Useful reference MDM implementation and learning resource","commenter",[71,75],{"id":72,"by":73,"text":74},"18116481","mrpippy","One of the few remaining services in macOS Server (discussed elsewhere on HN today) is Profile Manager, an Apple-developed MDM server. Given that it requires a static public IP…",{"id":76,"by":77,"text":78},"18129603","pharaohgeek","Reading through Apple's MDM protocol documentation and coding up one yourself is a great learning exercise. I had an idea for a niche MDM product and coded up a proof of concept.…",[80,87],{"value":81,"source":47,"evidence":82},"Server is only meant for enterprise deployments, hard for individuals to use",[83,84],{"id":59,"by":11,"text":60},{"id":85,"by":11,"text":86},"18116000","MDM push notifications require to be signed by a special certificate, which is only available upon request.",{"value":88,"source":69,"evidence":89},"Apple is unlikely to enter MDM so the niche is crowded",[90,94],{"id":91,"by":92,"text":93},"18115854","tootie","This seems like the kind of thing Apple should be offering on their own already. But ultimately you're not going to see many enterprises adopt an Apple-only MDM unless they just…",{"id":95,"by":96,"text":97},"18115963","hsk0823","Apple has absolutely no desire to go into the device management business. They make the devices, they don't provide IT departments with any in house tools, the entire macOS…",[99],{"value":100,"source":69,"evidence":101},"Support for per-app VPN configuration",[102,106],{"id":103,"by":104,"text":105},"18116899","walterbell","Do you know if a small business can use DEP features? Could per-app VPNs be used without DEP? If so, could they be used with MicroMDM, native iOS IPSEC client and an open-source…",{"id":107,"by":108,"text":109},"18125116","madjam002","Funnily enough I have been trying to do that today - I don't think you can. You create the per app VPN with a UUID, but the only way to associate an app to a Per-App-VPN…",[111,118],{"value":112,"source":69,"evidence":113},"Can small businesses use DEP features?",[114,115],{"id":103,"by":104,"text":105},{"id":116,"by":11,"text":117},"18117048","Anyone can use DEP, just need a DUNS number to enroll into the program, and then to purchase devices from apple direct, or from an approved reseller. Unfortunately you cannot…",{"value":119,"source":69,"evidence":120},"Is DEP required for per-app VPN?",[121,122],{"id":116,"by":11,"text":117},{"id":123,"by":104,"text":124},"18117077","Are those the same profiles generated by Apple Configurator 2? I was able to get per-site Safari VPNs added by manually editing XML in the profile, but no success with…",[126,137,143,147],{"value":127,"source":69,"evidence":128},"Jamf",[129,133],{"id":130,"by":131,"text":132},"18116824","ghostly_s","Hm, guess I missed that...and their offering has a long way to go before I'd consider it worth paying for. An alternative then might be Jamf, they recently started offering a…",{"id":134,"by":135,"text":136},"18116604","brazzledazzle","Isn’t that their pro-services offering where they monkeyed together a bunch of enterprise scripts for bugs\u002Fshortfalls Apple will never fix\u002Fimplement? Last I checked, I think the…",{"value":138,"source":69,"evidence":139},"AirWatch and Soti",[140],{"id":141,"by":92,"text":142},"18117709","I think you largely get what you pay for. Industry standard is either AirWatch or Soti.",{"value":144,"source":69,"evidence":145},"Apple Profile Manager in macOS Server",[146],{"id":72,"by":73,"text":74},{"value":148,"source":69,"evidence":149},"Meraki MDM",[150],{"id":151,"by":131,"text":152},"18116185","Setting up Mobile Device Management itself is not particularly onerous, it's definitely best practice to create a new Apple ID for that purpose, however. A technical individual…",{"comments":154,"answered":155,"key":156},6,4,[157,158,159],{"id":52,"text":53},{"id":116,"text":117},{"id":160,"text":161},"18117141","they should be the same, yes. You can compare the .mobileconfig file with the spec from the PDF. That's all commercial vendors do, push these XML files to your device.",{"commenters":163,"max_depth":154,"maker_replies":154,"first_comment_mins":164,"lifespan_hours":165},27,33,48,[167,169,170,172,173,174,175,177,179,182,185,189,192,195,199,203,205,207,211,212,214,217,218,221,222,225,227,229,230,233,234,238,239,243,245,247,249,251,254,257,259,262,264,267,270,273,274],[52,38,38,168,11,34],"maker\u002Fneutral\u002Fnone",[103,38,41,168,104,38],[116,38,38,171,11,34],"project\u002Fneutral\u002Fnone",[123,38,41,171,104,38],[160,38,38,171,11,34],[107,38,41,171,108,38],[176,38,41,171,104,38],"18133252",[178,38,41,171,104,38],"18117087",[180,38,38,181,11,34],"18117151","project\u002Fneutral\u002Fprivacy",[183,38,34,184,104,38],"18117280","project\u002Fcritical\u002Fprivacy",[186,38,38,187,188,38],"18117328","commenter\u002Fneutral\u002Fprivacy","jiveturkey",[190,38,41,171,191,38],"18117368","jedieaston",[193,38,41,171,194,38],"18118226","agret",[196,38,38,197,198,38],"18118894","commenter\u002Fneutral\u002Fnone","no_wizard",[200,38,38,201,202,38],"18117997","other\u002Fneutral\u002Fprivacy","jesseendahl",[91,34,41,204,92,38],"project\u002Fmixed\u002Fidea",[95,34,38,206,96,38],"other\u002Fneutral\u002Fidea",[208,34,38,209,210,38],"18116055","other\u002Fneutral\u002Fnone","beager",[134,34,38,209,135,38],[213,34,38,206,92,38],"18116168",[215,34,38,209,216,38],"18118139","giobox",[72,34,38,209,73,38],[219,32,38,209,220,38],"18115596","urda",[59,32,38,171,11,34],[223,32,41,171,224,38],"18115753","metabeard",[226,32,38,197,198,38],"18118916",[228,32,41,171,96,38],"18115981",[85,32,38,171,11,34],[231,32,38,197,232,38],"18116846","kiallmacinnes",[151,32,41,171,131,38],[235,32,38,236,237,38],"18116436","other\u002Fneutral\u002Fpricing","robinwassen",[130,32,38,236,131,38],[240,32,42,241,242,38],"18115709","project\u002Fpositive\u002Fidea","ecesena",[244,32,38,209,96,38],"18115968",[246,32,38,197,131,38],"18116128",[248,32,38,209,237,38],"18116521",[250,32,38,209,232,38],"18116815",[252,32,38,209,253,38],"18116941","andrewaylett",[255,32,38,209,256,38],"18117250","pmh",[258,32,38,209,104,38],"18117146",[260,32,38,209,261,38],"18117157","nicoburns",[263,32,38,209,216,38],"18118174",[265,32,42,241,266,38],"18118165","cynix",[268,32,41,171,269,38],"18130022","stephenr",[271,41,41,171,272,38],"18116367","markovbot",[141,41,38,209,92,38],[76,155,38,209,77,38],[],[277,282,287,291,296,300],{"id":278,"name":279,"points":280,"category":281},"18123058","Shipstreams",202,"consumer_social",{"id":283,"name":284,"points":285,"category":286},"18111721","Kabas",138,"languages",{"id":288,"name":289,"points":290,"category":20},"18129892","IPFS HLS Converter",126,{"id":292,"name":293,"points":294,"category":295},"18113779","Hyperfiddle",121,"dev_tools",{"id":297,"name":298,"points":299,"category":295},"18125789","ekill",107,{"id":301,"name":302,"points":303,"category":304},"18130562","Should I Send It?",91,"productivity",false,"v2",{"id":308,"name":5,"line":6,"ai":305,"cat":20,"year":13,"points":14,"comments":15,"rec":29,"s":309,"top":18,"kw":310,"maker":11,"domain":10,"tier":19,"attempts":38,"strip":311,"url":9,"mix":312,"praise":68,"objection":81,"sub":21},18115256,0.08,[24,25,26,27,28],"0303033010330300000003300300500000005330",[32,33,34,34],1794036570107]