QMX prevents security issue caused when using Simple Certification Enrollment Process (SCEP) with Mobile Device Management (MDM) of iOS (iPad & iPhone) devices

The United States Computer Emergency Readiness Team Vulnerability Note VU#971035

http://www.kb.cert.org/vuls/id/971035

In addition to the note referenced above, I provided links below to some excellent, detailed explanations. But net/net… MDM solutions typically use SCEP to establish trust between the enrolled device and the MDM vendor’s server. QMX – Configuration Manager Mobile Edition does not require SCEP to enroll – so, when looking for an MDM provider, keep this in mind and keep it safe.

Additional Articles:

The Use of the Simple Certificate Enrollment Protocol (SCEP) and Untrusted Devices

Ted Shorter, CTO, Certified Security Solutions, Inc.:

http://www.css-security.com/scep/

Mobile Device Certificate Enrollment: Are You Vulnerable?

Mark Diodati,Research VP, Gartner:

http://blogs.gartner.com/mark-diodati/2012/07/02/mobile-device-certificate-enrollment-are-you-vulnerable/

Related Blog Posts:

BYOD : Combining System Center Configuration Manager ( SCCM ) and QMX to Manage iPads, iPhones and Androids in the Bring Your Own Device world

System Center Configuration Manager (SCCM) Mobile Device Management with QMX: Blacklisting and whitelisting functionality in black and white

New QMX - Configuration Manager & Operations Manager v4.0.6 Generally Available on October, 1 2012. Extend SCCM & SCOM with over 400 non-Windows extensions

Comments from a Configuration Manager Perspective (SCCM) Regarding: BYOD Survey: 47% of Users Lack a Password on Smartphones Accessing Company Files

Download the new iPhone Configuration Utility for Mobile Device Managment (MDM)

Find out more about:

QMX - Configuration Manager Mobile Edition: Trial Downloads | Videos | FAQs | Forums | Documentation

See the list of all 400 SCCM and SCOM cross platform extensions

Other Helpful Links

QMX - Configuration Manage Solutions Suite

QMX - Operations Manager Solutions Suite

Questions?

Contact SystemCenterSales@quest.com