Creating a configuration file for the Mobile Encryption for iOS

Products

• Encryption Management Server
• Mobile Encryption for iOS

Issue/Introduction

Users of Mobile Encryption for iOS need to enroll to Encryption Management Server.

This can be made easier by using a configuration file. The configuration file includes connection information about your Encryption Management Server and any proxy servers you are using.

Please note that Mobile Encryption for iOS reaches EOS (End of Service) on 31 December 2020 and EOL (End of Life) on 31 March 2021.

Environment

• Symantec Mobile Encryption for iOS.
• Symantec Encryption Management Server 3.4.2 and above.

Resolution

By using a configuration file, Mobile Encryption for iOS users will only need to enter their LDAP and proxy server passwords.

The configuration file needs to be opened by the Mobile Encryption for iOS app so it should be given a *.pgp extension, eg, enroll.pgp.

The fields in the configuration file are:

• pgpStamp: The fully qualified domain name or IP address of Encryption Management Server.
• LDAPUserName: The user's LDAP username, eg, their Active Directory username.
• useProxyServer: Enable/disable this value depending if your Mobile Encryption for iOS users connect to the Encryption Management Server via a proxy server.
• proxyServerHostname: The fully qualified domain name or IP address of the proxy server.
• proxyServerPort: The port number to use on the proxy server.
• proxyServerUsername: The username of the Mobile Encryption for iOS user on the proxy server.
   

Once you have prepared the configuration file do the following:

1. Email the file as an attachment to the user and open the attachment on the iOS device.
2. When the iOS user opens the attachment, enrollment will begin using pre-populated information.
3. Note that if the user is already enrolled then before opening the attachment they will first need to reset their current details by clicking on Settings / Account / Reset Account Settings.
    

Attached is a sample configuration file. Replace all <string> values with the appropriate values for your environment.