Show HN: MicroMDM – Open Source MDM Server for Apple Devices • Hacker News Board

Show HN: MicroMDM – Open Source MDM Server for Apple Devices

#1

Post by zalmoxes » Mon, Oct 01, 2018, 6:13 PM UTC

Show HN: MicroMDM – Open Source MDM Server for Apple Devices
micromdm.io

Re: Show HN: MicroMDM – Open Source MDM Server for Apple Devices

#2

Post by urda » Mon, Oct 01, 2018, 6:46 PM UTC

I'm curious do any HN readers manage their personal devices through MDM with their own profiles, and what benefits are you seeing from that?

Re: Show HN: MicroMDM – Open Source MDM Server for Apple Devices

#3

Post by zalmoxes » Mon, Oct 01, 2018, 6:57 PM UTC

urda wrote: post #2

I'm curious do any HN readers manage their personal devices through MDM with their own profiles, and what benefits are you seeing from that?

The server is only meant for enterprise deployments. It would be pretty hard to do this on a personal level because you need to apply for an enterprise account with Apple, and request a very specific push certificate option.

Re: Show HN: MicroMDM – Open Source MDM Server for Apple Devices

#4

Post by ecesena » Mon, Oct 01, 2018, 6:58 PM UTC

urda wrote: post #2

I'm curious do any HN readers manage their personal devices through MDM with their own profiles, and what benefits are you seeing from that?

I just learned from a colleague that you can install a MDM if you have a Google Apps account. Of course now I want to try MicroMDM first.

I think the major benefit is that this way you control the MDM, and you don't risk that a MDM gets installed on your phone unexpectedly, sort of like a rootkit.

Re: Show HN: MicroMDM – Open Source MDM Server for Apple Devices

#5

Post by metabeard » Mon, Oct 01, 2018, 7:04 PM UTC

zalmoxes wrote: post #3

urda wrote: post #2

I'm curious do any HN readers manage their personal devices through MDM with their own profiles, and what benefits are you seeing from that?

The server is only meant for enterprise deployments. It would be pretty hard to do this on a personal level because you need to apply for an enterprise account with Apple, and request a very specific push certificate option.

You can't even sign up for the Enterprise program if your Apple ID is associated with the Apple Developer Program. You'll get the following error when signing up:

> Your Apple ID is already associated with a Team Agent enrolled in this program

Re: Show HN: MicroMDM – Open Source MDM Server for Apple Devices

#6

Post by tootie » Mon, Oct 01, 2018, 7:15 PM UTC

This seems like the kind of thing Apple should be offering on their own already. But ultimately you're not going to see many enterprises adopt an Apple-only MDM unless they just love vendor lock-in to the most expensive vendor.

Negativity aside, I applaud the effort. The MDM space is messy and crowded with bloated products. I hope these guys can at the very least pop the bubble a bit.

Re: Show HN: MicroMDM – Open Source MDM Server for Apple Devices

#7

Post by hsk0823 » Mon, Oct 01, 2018, 7:29 PM UTC

tootie wrote: post #6

This seems like the kind of thing Apple should be offering on their own already. But ultimately you're not going to see many enterprises adopt an Apple-only MDM unless they just love vendor lock-in to the most expensive vendor. Negativity aside, I applaud the effort. The MDM space is messy and crowded with bloated products. I hope these guys can at the very least pop the bubble a bit.

Apple has absolutely no desire to go into the device management business. They make the devices, they don't provide IT departments with any in house tools, the entire macOS management ecosystem has risen from a need and it's a mish mash of different vendors / open source tools / approaches to skin the cat that is device management.

Re: Show HN: MicroMDM – Open Source MDM Server for Apple Devices

#8

Post by hsk0823 » Mon, Oct 01, 2018, 7:29 PM UTC

urda wrote: post #2

I'm curious do any HN readers manage their personal devices through MDM with their own profiles, and what benefits are you seeing from that?

There are HN readers who are Directors of IT at their place of employment

Re: Show HN: MicroMDM – Open Source MDM Server for Apple Devices

#9

Post by hsk0823 » Mon, Oct 01, 2018, 7:30 PM UTC

zalmoxes wrote: post #3

urda wrote: post #2

I'm curious do any HN readers manage their personal devices through MDM with their own profiles, and what benefits are you seeing from that?

The server is only meant for enterprise deployments. It would be pretty hard to do this on a personal level because you need to apply for an enterprise account with Apple, and request a very specific push certificate option.

Anyone can get a push certificate, it's not just businesses,

https://identity.apple.com/pushcert/

Re: Show HN: MicroMDM – Open Source MDM Server for Apple Devices

#10

Post by zalmoxes » Mon, Oct 01, 2018, 7:31 PM UTC

Hi, I'm the author(along with several other developers). MicroMDM is used in some enterprise environments and was recently mentioned in a number of security presentations regarding Apple's MDM and Device Enrollment Program services.

https://duo.com/labs/research/mdm-me-maybe https://i.blackhat.com/us-18/Thu-August-9/us-18-Endahl-A-Dee...