How to create a client certificate profile for SonicWall Mobile Connect iOS 5.0

For customers using Mobile Connect on iOS devices Apple no longer allows for certificate installation. The following article describes how to create a client profile and how to install a client certificate on an iOS device.

How to create a client certificate profile for SonicWall Mobile Connect iOS 5.0

1. Install and launch Apple Configurator 2.
2. Go to File | New Profile.
3. In the General section:
   1. Give the profile a name. This name will appear in the iOS Settings app during installation, and later under Settings | General | Profiles.
   2. Configure the remaining General options as desired. Default values will work fine for one-off installations.
      
4. In the VPN section:
   1. Click the Configure button
   2. Fill in the fields as follows:
      
      1. Connection Name:
      2. Connection Type: Custom SSL
      3. Identifier: com.sonicwall.mobileconnect
      4. Server: <the VPN server>
      5. Account: <the username on the VPN server>
      6. Provider Bundle Identifier: com.sonicwall.mobileconnect.extension
      7. Custom Data:
         
         1. LoginGroupOrDomain: A valid login group or domain on the designated VPN server. Or you can omit this, and Mobile Connect will prompt the user.
      8. User Authentication: Certificate
      9. Credential: <select the certificate you added in Certificates>
      10. Enable VPN On Demand: Optional. Configure as you wish.
          
      11. Select the profile.
      12. Unlock the iOS device if it’s locked.
      13. On the iOS device, the Settings app should launch automatically and show a security prompt. The exact prompt will vary depending on how many VPN and certificate payloads are being imported, whether the iOS device is supervised, and whether the profile is signed. You may need to manually tap Install, or be required to authenticate on the iOS device.

      Method 2: Install via email

      1. Email your .mobileprovision file (from the “How to create…” section) to an address which is configured in Apple Mail on the iOS device.
      2. Open the mail on iOS.
      3. Tap on the attached .mobileprovision file in the email. The Settings app should launch automatically and show a security prompt. The exact prompt will vary depending on how many VPN and certificate payloads are being imported, whether the iOS device is supervised, and whether the profile is signed. You may be required to authenticate on the iOS device.