How to set MDM Push Certificate?

I want to generate a Push Notification certificate for my MDM service, but when I upload my certificate signing request, it always tell me that my request is invalid!
my certificate signing request is generated by keychain => Request a certificate from a certificate authority, and I'm sure that my account is an Enterprise Account. Can anyone help me how to do it right and get the certificate? Thanks!

Mac OS X Server 10.6 Snow Leopard Server does not support push notifications to iOS devices.
See Supported push mail accounts on iPhone and iPod touch (HT2625) and Mac OS X Server v10.6: Push Notification Server and supported applications (HT3947) for the official details.
From the second article, Currently, iOS Mail and Calendar apps do not support Push Notifications from Mac OS X Server v10.6.

Similar Messages

1.Obtaining an Apple MDM push certificate from Apple

How do i do this .?

If this is for a third-party MDM solution, log in here:
https://identity.apple.com/pushcert/
and click the Create a Certificate button. I believe that OS X Server automatically applies for a push certificate when you set up that service.
Regards.

How to set up push email to iphone

Can anyone tell me how to set up my snow leopard server and my iphone so that I get push email, calendar and addressbook? I can't find this anywhere in the manuals.
Thanks,

Mac OS X Server 10.6 Snow Leopard Server does not support push notifications to iOS devices.
See Supported push mail accounts on iPhone and iPod touch (HT2625) and Mac OS X Server v10.6: Push Notification Server and supported applications (HT3947) for the official details.
From the second article, Currently, iOS Mail and Calendar apps do not support Push Notifications from Mac OS X Server v10.6.

How to set "Identity" of the MDM Payload from iPhone Configuration Utility?

Does anybody know how to set the "Identity" of the Mobile Device Management (MDM) payload of a Configuration Profile from iPhone Configuration Utility (iPCU)? The description says that this is the "Cryptographic credential used for authentication" and I should "Add credentials in the Credentials payload". Any help is appreciated.

The Identity field in the MDM payload section of a configuration profile can only be set AFTER you have set the correct credential in the Credentials section. If you have set the correct credential in the Credentials section, then you will (in my experience) only have one choice for Identity in the MDM payload section. It will be the correct choice fortunately.
To set the correct credential in the Credentials section of the configuration profile, you must have a valid personal certificate in the Windows certificate store. If you have a valid personal certificate in the Windows certificate store it will show up in the (very long) list of certificates you can choose from when you click on Configure in the Credentials section.
You should be prompted for the password for 'exporting your identity'. Fill in both boxes and then click on OK. The set the password again. Yes, the password must be entered three times.
At this point you can go back to the MDM payload section and everything should be OK.
Note that my comments only apply to Windows. My system is Windows 7. However, only version of Windows probably works the same.

How do I set up push notifications on my iPhone 4S using iTunes on my computer?

Every time I try to go onto certain apps, a notification shows up saying connect to iTunes to use push notifications. No matter how many times I push okay the notification doesn't go away. As soon as I press ok this notification how's up right away. So when I do connect my phone to iTunes on my computer I don't know how I would set up my push notifications. Help me please and thank you.

Hello, Clv10.
Thank you for the question. The steps in the article below may help you resolve the issue with push notifications.
iPad and iPod touch: Unable to use YouTube or Push notifications
http://support.apple.com/kb/ts3305
Cheers,
Jason H.

Seeburger AS2: How to set up Certificates in PI

Hi ! ALL
We are setting up Seeburger AS2 adapters to exchange file with vendors (B2B).
can you please, share with us ..
1.How to set up certificates, decryption key, signature key.
2.Also, instead of the vendors coming directly to the PI box.....can you share if you have set up any DMZ/firewall environment and how it was set up to talk to PI, especially exchanging certificates.
Your help is greatly appreciated!!
Thank you,
Patrick
Edited by: Patrick Jones on Feb 4, 2009 10:23 PM

Hi Patrick,
For secured communication with business partners you need to implement message level security. You need to create certificates in visual administrator and exchange the public key with your business partner. Also you need to import your business partner public key in visual administrator.
For encryption - Use business partner public key
For signing - Use your private key.
For DMZ check the following help link
http://help.sap.com/saphelp_nw04/helpdata/en/d9/ef2940cbf2195de10000000a1550b0/content.htm
Regards
Prakash

I can't remember the password I set up for Certificate-based signatures. How do I request this password?

I can't remember the password I set up for Certificate-based signatures. How do I request this password?

The password is yours to keep and remember. Adobe do not have any backdoor to get it back -- because if there were a backdoor, hackers would use it.

How to revoke mac os x server push certificates?????

I am trying to clean up my purchsed copy of Lion Server. After I drag the os X server application to the trash and go to the apple store where I purchased Lion server for my mac it says that Server is already installed on my computer and the transaction cannot be completed. So then I decided to try and delete the push certificates I created and when I try to revoke them it takes me to a screen that says "False" and I can't seem to revoke these certificats
How can you get them revoked. I am just learning by trial and error. Any suggestions would be appreciated. Thanks
BG

That page talks about Snow Leopard's Networking abilities, not Leopards.
Off hand, I don't know whether what you describe is a new feature in Snow Leopard or not, but I've never seen Leopard do it (and, to be honest, wouldn't want to).
In either case, it's basically just Bonjour telling the router to configure port forwarding. Given that, I'd start by enabling mod_bonjour in Apache:
#LoadModule bonjour_module libexec/apache2/mod_bonjour.so
but I don't know how other processes are doing it.

Can i use APNS certificates created by the "Apple push certificates portal" to send regular push notifications to my iphone app (not MDM related)?

Can i use APNS certificates created by the "Apple push certificates portal" to send regular push notifications to my iphone app (not MDM related)?
The push notifications are sent from servers of my customers and i don't want to give them my own push cert (with the private key)

As KiltedTim mentioned you should be "good to go" in a couple weeks when IOS 8.0 is released to the public for your iPad. Here's more info. Scroll down to the "Send any kind of text message from any of your devices" section:
https://www.apple.com/ios/ios8/continuity/

How do I Renew a Push Certificate? - when I follow instructions.

When I go to Server and in Settings/Edit/Renew (to renew a push notification)
I get the following:
"The current certificate cannot be renewed. You must acquire a new certificate and reconfigure your devices."
No further instructions on how to acquire the "new" certificate.
Someone please lead me in the right direction?
Thank you.

I seem to be in a bit of a circular reference on this. The notifications part of the Server app tells me I cannot renew the certificate. When I go to "Manage my Certificates" and log into the portal, it tells me I must use the server app to obtain a new certificate. I'm still using Mountain Lion on my server and while I can live with this, my log is being bombarded with expired certificate notices that there doesn't seem a straightforward mechanism to fix.

How to set up basic POP email on N8

I've been reading up on all the email discussions about the N8, and it seems like some things work fine, while others need more development.
In my case, I would like to set up email using a basic POP email account setup. I have no need for "push" email right now - as I see it, receiving an email every half hour or so on my phone is an improvement over waiting until I get to my PC.
Ideally, I would like to leave the messages on my email server, so they will later on be downloaded to my PC.
I've noticed the following in one of the email discussions here:
"Cant believe no one else has responded with this before given the time this thread spans. I had this problem until I deleted and re-created my email (POP) accounts and then NOT accept the TOS at the end of the setup process. If you say YES and accept the terms, then your email accts get setup thru the Nokia messaging service and sent emails may get saved somewhere, but certainly not on the phone. You do not have to say yes to the TOS, just decline and finish setting up the email account."
Since I'm perfectly happy with the way email works on my laptop, using my existing servers, I think I should decline the TOS as described above.
I've found lots of guides on how to set up email on the N8. Can anyone here recommend one for how to do (only) what I need, in order to manually set up POP email on a N8, using the identical server information and settings that I now have on my laptop? Or, if this doesn't exist, can someone post the necessary steps here?
Thanks!!!

I have had a little play with this but will just outline what I found seems to happen because I did not thoroughly test it. Others experiences may be different.
If setting up a new account and one selects one of the listed email service providers and not "Other" then it sets up an IMAP account and gives the choices that Rayhipkiss describes together with the terms and conditions acceptance request. This can be seen after the setting up by looking in the settings for the server (which often, maybe always?, is a nokia.supl.imap one). If one deletes the server and server ports and replaces them with the same email service provider's pop and smtp servers and ports then the same setup choices that Ray mentions still remain. Once the account is set up you can always go back and change the server and port entries in the N8 setup for that account (see below for a difference).
However, even though one has set the pop ports it still seems to do an imap connection - this can be tested by setting up a Gmail account where one can turn off and on allowing imap server connections in the settings on ones Gmail account's setting on the webmail site. One finds that disallowing imap connections but allowing pop connections blocks the N8 even if one has entered the pop servers and ports on the N8.
Now, if when setting up the account on the N8 one selects "Other" it normally (see below) gets one to enter the address and pass for the account and then goes straight to allowing you to enter the servers and ports. Now if one enters these and it then takes one straight to the client for you to collect and send email. But now if you go back into settings for that account one gets the setting choices that I outlined i.e. the one that includes "Don't sync to server". If set up as a pop account it seems to behave as a pop account - for example, if one turns on the imap servers at the Gmail denying pop connections then if one tries to collect mail Gmail comes back with a certificate error (the certificate is for imap not pop). Unlike the settings menu giving the other settings Ray outlines this settings menu does not allow one to nominate a reply to address different to the address sent from and nor does it allow one to go back and change the server and ports. To change the server and ports as far as I can see if set up this way one has to reset up the account from the start.
OK, even stranger, then what I found is if I set up an account using the offered service providers, not using the "Other" choice then deleted that account and then reset up the same account using the "Other" choice it then behaved as Ray outlines including the terms and conditions acceptance request and also behaves as an imap account even if one enters the pop servers and ports. So the "Other" account setup choice seems to behave differently according to whether one has previously setup that account using one of the non "Other" service provider choices or not?????
I don't know if anyone wants to experiment further and discover more or clarify the behaviours. I just did some quick playing around so did not analyse it much, however the above is the general gist of what I found. It is sometime since I set up email accounts on my E52 but from memory it behaved much the same way as the N8 does and is generally weak on handling pop accounts - in fact I would suggest that many who think they are using pop servers will find that behind the scenes it is really using imap ones.
A real downer for me is for a pop account there seems to be no way to set up a reply to address in the sent emails that is different to the address sent from. This need for me being due to the way I manage emails across several machines.
I'm off to have a beer

Renewing Push Certificate with renamed Apple ID

Hello everyone,
I have a specific problem here:
- I set up an OS X Lion Server at work to manage a bunch of iOS devices with Profile Manager
- I created an Apple-ID for my work-email to request a Push Certificate for that server
- I then RENAMED the Apple-ID to a functional email-address (however, my original one is still setup as alternative email address)
- I can still see my Push Certificate when login in to the Push Certificate Portal
- Now, I need to renew that certificate in 30 days.
Question 1: Can I renew that certificate using the Server.app (which still knows my old email-address) or do I need to rename my Apple-ID AGAIN to the old state before doing so?
Question 2: Will I need to re-enroll my iOS devices with either option stated above?
Question 3: I plan to upgrade to Mountain Lion Server - in the process, I will be asked for an Apple-ID for the Push Certificate ... will it be clever enough to recognize my renamed Apple-ID, or do I need to rename it before that as well?
Question 4: Is it possible to let Apple Support handle this mess, has anyone tried that successfully so far?
Thanks for reading :-)
Best regards,
Olaf

I'd like to share my experience how the process went.
As initially stated, I needed to renew my Push Certificate within 30 days, but had renamed my Apple ID (from [email protected] to [email protected]).
Renewing meant, re-enrolling all devices. Somebody suggested, I should upgrade to Mountain Lion Server first, THEN renew, it would be easier then (you know, click one button and BOOM, magic..).
So, the idea then was
- Perform in-place-upgrade
- re-enroll certificate after upgrade
short answer... that didn't work out.
Before upgrading, I trained on a cloned system.
In the process of the upgrade, you HAVE to enter an Apple-ID (i.e. email address) to connect to the APNS ... that means it either is exactly the one you created the Push Certificate with in the first place, or you re-enroll or your devices - Apple gives a nice warning message during the process.
OK, gnashing teeth, I renamed the Apple-ID back to the original state and tried the in-place upgrade again, this time on the production server ... what should go wrong, it worked out before on the clone (sans the certificate part) ... hhhm ... not this time. It seemed to be some problem with the Raid card. But hey, that's what Carbon Copy Cloner, psqldump and Timemachine are for, right?
Wrong.
After the restore, my production machine came up fine, everything worked - except pushing anything to my devices.
So, technically I restored OS X Lion Server to a running state AND had 3 different means of backup, just in case (CCC, Timemachine, scripted DB dumps and OD dumps) and still in the end, I had a bunch of devices that needed to be re-enrolled. Brilliant.
More gnashing teeth. Now, knowing I need to re-enroll anyway, I installed ML Server from scratch, created a new Push certificate (using [email protected].), re-entered ALL mobile devices, policies and groups by hand (oops, Apple dropped psqldump support in ML Server, there is no database import from prior versions..FRAK) and re-enrolled all devices, happy users assured.
And now the fun part: If you sign your mobile profiles (you know, that checkbox in Server App) for extra security, you need to take care of your Code Signing Certificates validity. You can renew this easily (one click, BOOM, magic).
The Code Signing Certificate is valid for 1 year. If you renew this certificate, re-enrollment is mandatory.
DOUBLE-FRAK.
So in the end, it didn't matter at all that I renamed my Apple-ID back and forth, it didn't matter that the in-place upgrade didn't work out and I had to do a clean install, there was actually no option of pulling this stunt without re-enrolling all devices, at least when the Code signing certificate were to expire.
Please Apple, FIX this. It can not be, that I have to re-enroll all my devices EVERY YEAR. Why are your certificates only valid one year? Why can't you design a convenient mechanism to renew all certificates and push them to the devices automatically?

How we set up multiple websites on OSX Server

BACKGROUND
After fiddling and futzing around for weeks (actually since last year) I've finally figured out how to set up multiple websites (virtual sites) using one port and one IP address. While there seems to be lots of discussion on this topic, it seems that the basic assumption is that one knows everything about websites, DNS and all that stuff, which I do not.
When our network was originally established the engineer set up a wiki and also configured webmail, so we had two sites, one secured for mail and the other open for Calendar and the wiki. We were not hosting any websites locally because our school website is hosted by a company in New England.
This year I wanted to set up websites for teachers and students. As great as the wiki is, there are some things it just can't do as well as a website. So I figured if I set up the sites teachers could link back and forth from one to the other. In addition kids could now start to use a real website instead of the cobbled together file mess I had when we ran a Windows network. Also iWeb is a much more accessible tool than FrontPage.
SERVER SIDE:
Snow Leopard Server - 10.6.4
There are two - actually three pieces if you want your iWeb clients to connect to the server: Server Side Web Services, DNS and, in my case, FTP.
================================================ SERVER SIDE - WEB SERVICES
If you haven't turned on Web services, you'll need to open Server Admin and do that. If you don't know how to set up web services - just reply and I'll step you through that as well.
Once web services are set up and turned on, you'll see it listed under your server’s name in the Server Admin sidebar. Click on "Web" and then click on the "Sites" tab at the top of page. This is where you list all your sites.
Click the plus button and enter the fully qualified name of your site, for example: "students.myschool.org". Don't use the defaults here (no name) - that's what got me in trouble before. BE SPECIFIC!
You'll be looking at the "General" tab (the other tabs, "Options", "Realms", etc. we'll deal with in a second).
On the "General Tab", the default IP address ("any") and port (80) is just fine. We'll run everything over port 80. (Apache figures all the virtual site stuff out - you don't need your rocket science degree for that.)
"Web Folder:" is important because this is how you'll "segment" your websites. While I would NEVER do this again, we have a solid state hard drive for the OS and a RAID array for our data files. IF you have that, make sure you do NOT use the default "Web Folder" because it will store all your files on your solid state drive. There may not be enough room, over time, on that drive. I've not experienced it yet, but it's my understanding that if the drive fills up, the server shuts down.
I store my web sites on a folder on the RAID array.
Everything else on that tab can be left as the default. (Just make sure that you have an "index.html" or "index.php" file in your web folder root, but iWeb will take care of that for you.)
I would put in your email address in the "Administrator Email:" field.
Under "Options" you really don't have to put anything. I've tested making websites with iWeb and it doesn't appear that anything needs to be checked.
Nothing needs to be entered in "Realms" as well from what I see working w/ iWeb.
The defaults in "Logging" are fine.
You can leave "Security" alone, but we do have a (self-issued) certificate listed for our webmail site.
"Aliases" is important. Under "Web Server Aliases" you enter how you want the site to respond to when users type in a URL in their web browsers.
When our web server was initially set up the engineer set up "wiki.myschool.org" on port 80 and "mail.myschool.org" on port 443. In the aliases section was nothing but a "*" (the wildcard character). That means, from what I can figure out, that the webserver will respond to these sites regardless of what is typed in the URL. (Well, something like that - point is, if you create OTHER websites, you'll NEVER get to them because the wildcard character in the "Aliases" section, in effect, grabs those web requests and redirects them to the sites that are already there.
In my case I deleted both of those wild card characters. For my "wiki.myschool.org" site, I entered "mail.myschool.org". That means if you type EITHER "wiki." or "mail.", go to the site that’s stored in the “Web Folder” we set up when those sites were created.
For "mail.myschool.org" I just DELETED the wildcard character. I wanted that site (since it was secured) only to respond to "mail." - nothing else. (You're not going to that secured site for any other reason than to get your mail.)
"Proxy" can be left blank. Have no idea what that does. As time permits I'll do some research and figure out what it's used for.
"Web Services" is if you want to provide any MORE services to this particular site. Most likely you'll want to uncheck all the boxes. For our "wiki." site, we have checked "Wikis", "Blogs", and "Calendar". For our "mail." site we have those checked PLUS "Mail".
I would create a separate "Web Folder" for each of your sites. I don't know if that's a requirement but for housekeeping purposes, I would keep the sites separated. And I SUSPECT that it's "best practice" to separate your wiki from your other websites.
SERVER SIDE - DNS
OK...now you have to make your site reachable and the only way to do that is to set up DNS so that folks don't need to type in the IP address of your web server. You need to set up DNS inside your network and, if you want folks in the outside world to reach your website, you'll need to set up an external DNS as well. I'm going to cover INTERNAL DNS - if you don't know how to set up EXTERNAL DNS - reply or email me and I'll post those instructions.
Most likely you have already created Zones for you network...all you really need to do is create "Aliases" so that when you type "students.myschool.org" your web browser will know that site resides on IP address XXX.XXX.XXX.XXX.
If you've set up Zones then you already have a "Machine" setting that translates your server’s name to an IP address and vice versa.
All you need to do is create an "Alias" (CNAME) record for, in this case, "students". You’ll see the choices for types of records when you click the "Add Record" button.
There are only two fields to configure for a record: "Alias Name" - in this case "students" and "Destination" - in this case "servername.myschool.org". (You've already entered a machine record that says "servername" = 192.168.1.x.)
That's it for Internal DNS.
SERVER SIDE - FTP
Now you have to get iWeb to communicate with the webserver.
There are only three ways iWeb will communicate with webservers: MobileMe, Local Folder and FTP Server.
Local Folder is really only practical if you want to host a website on a laptop (I was blown away initially when I found out that all Macs had a built-in web server - how neat is that?). I think there are some very cool things teachers could do with configuration, and, of course, you wouldn't need to set up any web services on the web server, but that's for another discussion. You need to set up FTP services on the web server.
Turn on and enable FTP on your webserver.
You can leave the defaults for "General", "Messages" and "Logging". "Advanced" is the only thing you want to set. I set "Authenticated Users See:" to "Home Folder Only". I set the "FTP Root" to the same root folder in which I plan to store my web sites (/VOLUMES/RAID Array/WebServer/Documents). This setting sets that folder only to be accessible via FTP.
I would suggest returning to your DNS settings and adding one more "Alias". Set "ftp." to point to your webserver. Why? So folks can edit their sites from home (see below).
CAVEAT: If you are running FTP on other servers, make sure that the settings here do not conflict with the settings on the other servers. For example, I'm running FTP on my file server so that my scanners can communicate with it. However, I configure my FTP settings by machine name and NOT "ftp.myschool.org".
================================================
CLIENT SIDE - CONFIGURING iWEB
Now you have to configure iWeb so that it will communicate with your server.
Click on the "Site" icon so that "Site Publishing Settings" appears.
Publishing:
"Publish to:" = "FTP Server"
You can set the "Site name:" and "Contact email:" to whatever you want. But see below!
FTP Server Settings:
"Server address"=ftp.myschool.org (you could also enter in servername.myschool.org or the IP address. However, if you want folks to be able to work on the site from home, you will need to configure external DNS for that. If you use the IP address, you're out of luck for remote access to the site. (You can do it but it's beyond the scope of this discussion.)
"Username" & "Password" should be your user's network login credentials.
"Directory/Path" - this is important. Remember, you set your "FTP Root" to be "/VOLUMES/RAID Array/WebServer/Documents". If you leave this field blank then the website will be dumped into this folder. If you are only setting up one site, that may be OK. However I wanted to set up a "students" site folder, a "faculty" site folder and a separate site for our literary magazine.
THEREFORE: I have, in my ..../Documents folder (on the server), a "students" folder, a "faculty" folder, and a "litmag" folder.
SO...in my "Directory/Path:" field, I have "/faculty". That means the full path to this website is "ftp root/faculty" or "/VOLUMES/RAID Array/WebServer/Documents/faculty" (You don't need a trailing "/" character. iWeb will automatically append the folder for you user depending on what you entered in "Site Name:" in the "Publishing" area.
Website URL:
This is the root website depending on whether it is "students" or "faculty". Since iWeb will append the site name to this root website, I accomplished what I hoped to accomplish in this post (http://discussions.apple.com/message.jspa?messageID=12288561#12288561).
Faculty sites will be @ http://faculty.myschool.org/username. Students @ http://students.myschool.org/username. PERFECT!
iWeb is such a GREAT tool - NOW the kids can start using it!
I want to reiterate that this works for our school but it should work for you as well. There may be better ways to do this but it works for us.
Hope this has been helpful and you won't have to spend weeks trying to figure this all out by yourself!

OK...here's how we did it.
To get access to the website you created from outside your network there are a couple of steps.
First, you have to have a STATIC IP address from your ISP. If you have a T1 circuit, no problem...you usually get a couple of static IPs you can use. However, if you have a cable modem circuit, most likely you have a dynamic IP address which changes when you connect to the internet. Usually a static IP will cost a bit more because the ISP has to go through a couple of steps to set it up for you. But once you have the address, you now have a way for folks outside your network to connect with you.
(I’m also assuming that you use a router of some sort through which traffic flows out to the internet and that you aren’t using connection sharing or something like that.)
The next thing you need to do is have your new static IP address associated with the server on which you are hosting your website. You've probably already done that if your website works inside your network. However, you've associated a private ip (192.168.x.x, etc.) to your web server. That doesn't mean anything to folks on the outside because private IP addresses are just that - private - folks can't access them. (I won't get into VPN because that's a whole other topic.)
The way you associate your new static IP address to your web server is through some sort of dns application from your ISP. For example, we use TierraNet to manage our external DNS information. They have a web interface control panel that is very similar to the DNS interface for XServer. You can create CNAME records (aliases - other ways that folks can access your servers).
Basically you create an "A" (CNAME) record with a fully qualified domain name (e.g. webserver.myschool.org) and point it to your public IP address (XXX.XXX.XXX.XXX) which you just got from your ISP. It's going to take a while (24-48 hours) for this change to take effect. BTW, you can create as many “A” records as you want. For example mail.myschool.com and wiki.myschool.com could point to the same place.
You want to make sure that the fully qualified domain name you enter in the external dns utility matches the name you used when you created your internal dns records on your XServer.
OK...so now folks can get to your domain - but, remember, you have a private network IP scheme between them and you. You now have to tell your router that when web traffic arrives, allow it inside the network and direct it to your web server.
Let's say your public IP address is 205.100.112.50 and your web server is 192.168.0.5.
You have to create, in your router’s "Security Zone" (router companies call them different things) a couple of rules. Usually the first rule is: "Let everything inside the network get out to the web." You've probably already done that if folks inside the network can reach the internet.
You then have to tell the router to allow web traffic (port 80) into your network AND redirect that traffic to 192.168.0.5.
We use AdTran routers and they have a web interface which allows you to write "rules" affecting public and private traffic. Public is folks outside the network, private is folks inside.
AdTran calls them "Security Zones" and you modify those zones with policies.
So my "Policy" would say, in the above example, redirect traffic from my public IP (205.100.112.50) -> to my web server -> (192.168.0.5).
THEN you have to modify this policy with what AdTran calls "Traffic Selectors". You've said, OK, you can get in, but WHAT can get in?
The "Traffic Selector" is written to say: "Permit" "TCP" traffic from 205.100.112.50 only through Port 80. (That's the port that web traffic goes over. If you wanted a secure website, you'd add another traffic selector that opens port 443, for example.)
I'll tell you I'm no genius when it comes to this. I called AdTran and had them configure my router for me. I told them what I wanted done, they remoted into the router and configured it. But then I could go to the web interface and see what they did and then added rules later on when I wanted, for example, to get access to the network via Apple Remote Desktop or VPN into the network on my iPad.
I'd bet that your router has a maintenance agreement that includes this service and if it doesn't it should have.
I did find that I still had issues when I tried to set this up originally and it had to do with the ORDER of the policies. I can’t remember exactly what the issue was, but, effectively one of the policies highjacked traffic before the policy that I wanted got triggered. Simply moving them around in the list fixed that issue. So if you have this set up but still can’t access the site, check the order of your rules.
I don’t know if that helps or not, but I try to think about this stuff conceptually and then get someone to help me with the details. I work with this stuff so infrequently that I forgot how I did something 6 months or a year ago. I’m in the process of creating a wiki for the school which documents all this stuff, but that’s a major undertaking.
Cheers,
John

How to force a "push" for contacts sync?

In Settings, I use my MobileMe account ONLY for contacts, calendars, and bookmarks, not for e-mail.
I have Fetch New Data set to Push, then Push set to Manually, then in Advanced, my e-mail accounts are set to Fetch (i.e. it'll update my mail only when I launch the Mail app) and my MobileMe account set to Push (i.e. I'd like them to be pushed to the phone).
However, no contacts seem to get pushed to the phone. It's confusing as to how I'm supposed to initiate a manual push. Launching Contacts doesn't update the contacts.
I don't particularly want to set Push to every 15 or 30 minutes, because I don't want to drain battery life. I'd be happy if it sync'ed once a day, but right now it's not syncing at all.
Can someone help me understand how "push" and "manually" work (since there is no "force push right now" button anywhere) and how I can keep my contacts on my iPhone updated regularly automatically?
Should I set MobileMe to Fetch? So that, as in when I launch Mail it updates the mail, when I launch Contacts it will update the Contacts? That would be good enough for me.
(Also, this entire post is about downloading contacts from MobileMe, but I'd also like to make sure the reverse works too -- that if I add a contact or calendar date to my iPhone, it gets synced with MobileMe and later appears on my desktop machine.)

Huh. Mine it does happen automatically, both ways.
On the phone, Settings, Mail, Mobile Me account--do you have to set to sync contacts, calendar and bookmarks? Those can be turned off individually (this is in the account detail itself, not under the Fetch/Push setting screen.)
On the computer, System Preferences, Mobile Me, do you have it set to sync automatically?
When I see things not syncing, I generally force a sync from the computer, figuring that triggers the server and so on down the line to the phone.

How to set up Airport Extreme with Charter ARRIS Modem TM902A for the first time for WIRELESS.

How to set up Airport Extreme with Charter ARRIS Modem TM902A for the first time for WIRELESS.
When Charter Tech goes to your site, have them connect the modem up, but do not connect the modem to your iMAC or MacBook Pro. What you want to do is connect the Airport Extreme to the iMac or MacBook Pro first with the Ethernet Cable. You have to do this to configure via Airport Utility to set up the Base Station Name & Base Station Password.
You will then create/configure a Wireless Network, create your Wireless Password that will be entered on each of your Devices, example, Apple Tv, your iPhone, etc., you want to allow access to your Wireless Network you are creating.
Wireless Security will be -> WPA/WPA2 personal or just WPA2
Enter the Wireless Password you want
Verify the Wireless Password (enter it again)
After it is created you will see it on the Airport Utility window with the name you created for it and to the left, will be a Dot (circle that will be yellow).
Next you then want to unplug the power to the Airport Extreme, and then take the end of the Ethernet cable you unplugged from the iMac or Lap top MacBook Pro and connect it to the back of the Modem.
Next unplug the power cord from the modem and wait about 5 minutes, then plug the power back into the Arris Modem and wait until all lights come back on the modem wait
about 5 minutes, then plug the power cord back to the Airport Extreme and you will see it the light blinking yellow. Wait about 5 to 10 minutes, during this time Restart you IMAC or MacBook Pro, and once it is back up click on the Airport Utility and you should see on the Airport Utility screen.
For INTERNET to the left the light should be green and you should see the Airport Extreme also appear and the light to the left on the screen should also be green. If they are, you then should be able to click on the Wireless Symbol on top of bar of the screen and click to select the Wireless Network Name you created.
If you Do Not See the light (Icon) next to INTERNET turn Green, or if you see the Internet Light Green, but the Light (Icon) next to the Airport Extreme is yellow, unplug the power again to the modem and unplug the power again to the Airport extreme and wait about 15 minutes or up to 30 minutes. Then plug the power cord back to the modem wait till all the lights light up then, plug the power cord back into the Airport Extreme and Restart your iMAC or MacBook Pro.
The Airport Extreme light should change from yellow to green. Open up the Airport Utility to see what the indicators are showing they should both be green. Again select Wireless network you created under the Wireless Icon on the top right of the screen. Open Safari and see if you are able to Route to a web page or the apple site should appear.
WHAT TO DO IF YOUR AIRPORT EXTREME WAS PREVIOUSLY SET UP FOR USE WITH ANOTHER CARRIERS ROUTER OR MODEM.
NOTE: If you already had your Airport Extreme connected for example, I previously had ATT Uverse and the Airport Extreme was connected to the Wireless Router Model 3801HGV, I disabled the Uverse Wireless and used the Airport Extreme for the Wireless signal in bridge mode, as the Airport extreme Signal is much stronger than the Uverse router, and I was able to obtain a Wireless signal with the Airport Extreme way much better with no signal loss which was very very frustrating with the Uverse router.
Anyhow if you had it hooked up like this, now that you will be using it with the Charter ARRIS Modem TM902A, you will need to reset the Airport Extreme to clear out the old data it has in memory, with the previous set up otherwise it will not work. Trust me I spent 6 hours trying to make it work reading all Apple Support Community questions and answers relating to this type issue/problem others have been having trying to get their set up working. I tried all the tips, and I finally decided just to see if by chance I would be able to connect with someone with Charter Tech support who might be familiar with Apple to be able to assist me and by luck I did. He told me why it was not working and was all due the previous configuration with the ATT Uverse router was still in memory with the Airport Extreme. Finally it was 10:30 PM when I decided to call Charter Tech Support and I had been working on this since 3:00 pm pacific. I did not call them earlier as all the post I read said they never received any good help from Charter. After calling them I finished up by 11:00 PM and was able to finally connect Apple Tv, iMac, iPhones and Macbook Pro. We love our Apple Product and Happy all is connected with the new
Internet Provider Charter. I must say the speed is way way much better than it ever was with AT&T Uverse.
THIS IS WHAT YOU WILL NEED TO DO:
First you will need to unplug the Airport Extreme, then by taking the tip of a pen or paper clip end you need to push the reset button on the back of the Airport Extreme and hold it
down and at the same time plug the power cord back into the Airport Extreme count to 5 or 10 then release the reset button. Then once he light in front of the Airport Extreme stops blinking you need to plug the Ethernet cable from the Airport Extreme to your iMAC or Macbook Pro, and restart which ever one you have, then open the Airport Utility once it is back up. If you see airport extreme pop up with the old network name or it shows and yellow triangle click on the Airport Extreme ICON it will not let you configure it but will ask if you want to get rid of it or remove and just do it. Then Again restart your iMAC or MacBook Pro, open up Airport Utility again, and on the top left you should see under “Other Airport Base Stations” the MAC ID for the Airport Extreme.
You will then create/configure a Wireless Network, create your Wireless Password that will be entered on each of your Devices, example, Apple TV, your iPhone, etc., you want to allow access to your Wireless Network you are creating.
Wireless Security will be -> WPA/WPA2 personal or just WPA2
Enter the Wireless Password you want
Verify the Wireless Password (enter it again)
After it is created you will see it on the Airport Utility window with the name you created for it and to the left, will be a Dot (circle that will be yellow).
Next you then want to unplug the power to the Airport Extreme, and then take the end of the Ethernet cable you unplugged from the iMac or Lap top MacBook Pro and connect it to the back of the Modem.
Next unplug the power cord from the modem and wait about 5 minutes, then plug the power back into the Arris Modem and wait until all lights come back on the modem wait
about 5 minutes, then plug the power cord back to the Airport Extreme and you will see it the light blinking yellow. Wait about 5 to 10 minutes, during this time Restart you IMAC or MacBook Pro, and once it is back up click on the Airport Utility and you should see on the Airport Utility screen.
For INTERNET to the left the light should be green and you should see the Airport Extreme also appear and the light to the left on the screen should also be green. If they are, you then should be able to click on the Wireless Symbol on top of bar of the screen and click to select the Wireless Network Name you created.
If you Do Not See the light (Icon) next to INTERNET turn Green, or if you see the Internet Light Green, but the Light (Icon) next to the Airport Extreme is yellow, unplug the power again to the modem and unplug the power again to the Airport extreme and wait about 15 minutes or up to 30 minutes. Then plug the power cord back to the modem wait till all the lights light up then, plug the power cord back into the Airport Extreme and Restart your iMAC or MacBook Pro.
The Airport Extreme light should change from yellow to green. Open up the Airport Utility to see what the indicators are showing they should both be green. Again select Wireless network you created under the Wireless Icon on the top right of the screen. Open Safari and see if you are able to Route to a web page or the apple site should appear.

I just got a Charter Modem. Model TM822. While I was moving, my Airport Extreme was still at my old place.
I have a Linksys WRT320N I used for the initial Charter setup.
I can get my Airport to work here, but the Internet light on the Modem flashes Yellow.
Hasn't caused any issues so far but one thing I did notice.
On the Linksys there were 3 DNS servers listed.
The Airport Extreme only lists 2 and i don't see where I could add another, only change whats already there.
I tried everything above, but light on modem still flashes yellow.
I have the technicians cell phone. Told me "that shouldn't be" and gave the same advice listed above.
I'll break down and call Charter one day, see if it's on their end. NSA tracking may need a reset LMAO.

How to set MDM Push Certificate?

Similar Messages

Maybe you are looking for