Mobile MDM question

1

Is there an example *.mobileconfig file for the iOS Ziti Mobile Edge to configure the network via MDM (zero touch)?

Similarly, is there a way to configure the Android app without the end user configuring it via the app UI?

2

I don’t have much experience with mobileconfig files, but I created one that seems to work on my Mac. I installed it on my iPhone by downloading it to my phone and installing it from the Settings app, but it wasn’t stored correctly in the VPN settings. I have to step away from this for a bit, but here is what I used on my Mac in case it is helpful to you:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>ConsentText</key>
	<dict>
		<key>default</key>
		<string></string>
	</dict>
	<key>PayloadContent</key>
	<array>
		<dict>
			<key>IPv4</key>
			<dict>
				<key>OverridePrimary</key>
				<integer>0</integer>
			</dict>
			<key>PayloadDescription</key>
			<string>Configures Ziti settings</string>
			<key>PayloadDisplayName</key>
			<string>Ziti Edge Tunnel</string>
			<key>PayloadIdentifier</key>
			<string>com.apple.vpn.managed.12345678-1234-1234-1234-123456789012</string>
			<key>PayloadType</key>
			<string>com.apple.vpn.managed</string>
			<key>PayloadUUID</key>
			<string>12345678-1234-1234-1234-123456789012</string>
			<key>PayloadVersion</key>
			<integer>1</integer>
			<key>Proxies</key>
			<dict>
				<key>HTTPEnable</key>
				<integer>0</integer>
				<key>HTTPSEnable</key>
				<integer>0</integer>
			</dict>
			<key>UserDefinedName</key>
			<string>Ziti Edge Tunnel</string>
			<key>VPN</key>
			<dict>
				<key>AuthName</key>
				<string>OpenZiti</string>
				<key>AuthPassword</key>
				<string></string>
				<key>AuthenticationMethod</key>
				<string>None</string>
				<key>RemoteAddress</key>
				<string>100.64.0.1</string>
				<key>ProviderBundleIdentifier</key>
				<string>io.netfoundry.ZitiPacketTunnel.PacketTunnelProvider</string>
			</dict>
			<key>VPNSubType</key>
			<string>io.netfoundry.ZitiPacketTunnel</string>
			<key>VPNType</key>
			<string>VPN</string>
			<key>VendorConfig</key>
			<dict>
				<key>ip</key>
				<string>100.64.0.1</string>
				<key>subnet</key>
				<string>255.192.0.0</string>
                <key>mtu</key>
                <string>4000</string>
                <key>dns</key>
                <string>100.64.0.2</string>
                <key>fallbackDnsEnabled</key>
                <string>FALSE</string>
                <key>fallbackDns</key>
                <string>8.8.8.8</string>
			</dict>
		</dict>
	</array>
	<key>PayloadDescription</key>
	<string>Ziti Edge Tunnel</string>
	<key>PayloadDisplayName</key>
	<string>Ziti Edge Tunnel</string>
	<key>PayloadIdentifier</key>
	<string>com.apple.vpn.managed.12345678-1234-1234-1234-123456789012</string>
	<key>PayloadOrganization</key>
	<string>NetFoundry Inc</string>
	<key>PayloadRemovalDisallowed</key>
	<false/>
	<key>PayloadType</key>
	<string>Configuration</string>
	<key>PayloadUUID</key>
	<string>12345678-1234-1234-1234-123456789012F</string>
	<key>PayloadVersion</key>
	<integer>1</integer>
</dict>
</plist>
3

Ref: Documentation for supported intents · Issue #152 · openziti/ziti-tunnel-android · GitHub

Is there similar documentation for Android Intents?