简体繁体 English

iOS企业资源调配配置文件到期

[英]iOS Enterprise Provisioning Profile Expiration

原文 2012-02-14 02:41:31 2 3 ios/ iphone/ enterprise

Every iOS Enterprise Provisioning Profiles expires after 1 year, correct? 每个iOS企业资源配置文件都会在1年后到期，对吗？ After they expire and you renew them, do you need to re-install the new Provisioning Profile to all the devices, or do the devices get renewed automatically from Apple's certificate server? 在它们到期并续订之后，您是否需要将新的配置文件重新安装到所有设备，或者是否可以从Apple的证书服务器自动续订设备？

So, in other words, after you distribute an Enterprise app, do you need to update all the devices every year or can you simply renew the certificate on the Developer Portal or via Xcode? 换句话说，在您分发企业应用程序之后，您是否需要每年更新所有设备，或者您只需在Developer Portal或Xcode上续订证书？

3 个解决方案

BigDave's answer and my answer here (as Thilo posted) actually cover all grounds in your question. BigDave的答案和我在这里的答案（正如Thilo发布的那样）实际上涵盖了你问题中的所有理由。 I would just add two new things if you consider re-signing and distributing all your apps again, a big hassle. 如果您考虑重新签名并再次分发所有应用程序，我会添加两个新内容，这是一个很大的麻烦。

You don't need the code of your app to re-sign with new certificate. 您不需要使用应用程序的代码重新签署新证书。 You can do it through the terminal(and probably create a shell script if you have large number of apps). 您可以通过终端执行此操作（如果您有大量应用程序，可能会创建一个shell脚本）。 Check this thread. 检查这个帖子。
If you have large number of apps distributed in your enterprise, consider deploying a MDM server. 如果您的企业中分发了大量应用程序，请考虑部署MDM服务器。 That way you can re-sign/Update your apps and push them wirelessly on registered devices with minimal user interaction. 这样，您可以重新签名/更新您的应用程序，并在注册设备上以最少的用户交互无线推送它们。

EDIT: In regards to expiring provisioning profiles, the documentation states: 编辑：关于配置文件到期，文档说明：

If the expired provisioning profile is installed on your device, remove it, as described in Verifying and Removing Provisioning Profiles on Devices. 如果设备上安装了过期的配置文件，请将其删除，如验证和删除设备上的配置文件中所述。 If the provisioning profile is an ad hoc provisioning profile, re-sign and distribute your app using the regenerated provisioning profile, as described in Exporting Your App for Testing (iOS, tvOS, watchOS). 如果配置文件是临时配置文件，请使用重新生成的配置文件重新签名和分发您的应用程序，如导出用于测试的应用程序（iOS，tvOS，watchOS）中所述。

From the apple site: 从苹果网站：

An app won't run if its distribution certificate has expired. 如果应用程序的分发证书已过期，则不会运行该应用程序。 Currently, distribution certificates are valid for one year, and you can have two certificates active at the same time. 目前，分发证书有效期为一年，您可以同时激活两个证书。 The second certificate is intended to provide an overlapping period during which you can update your apps before the first certificate expires. 第二个证书旨在提供重叠期，在此期间您可以在第一个证书到期之前更新您的应用程序。

So updating an app once a year is actually the best case. 因此，每年更新一次应用程序实际上是最好的情况。 If the app is signed with a distribution certificate with only 6 months left then it will need to be updated after 6 months. 如果应用程序使用仅剩6个月的分发证书进行签名，则需要在6个月后更新。

只需向您的用户发送续订的.mobiprovision个人资料，无需更新现有应用。