Securing Mobile Config files

Question

I created a mobile config file that would set up wifi access for my companies various locations. I uploaded it to a webserver so that users can browse to it and install the file on the iphone. Everything worked perfect, but I noticed that if someone just downloads the file and opens it in notepad or textedit, our wifi's WPA2 key is just listed there plain as day. Not encrypted or hidden in any way. Is there a way I can do this but keep that information hidden? I want them to be able to do the install but not get information out of the mobile config file.

Answer 1

You can encrypt the payload information on a mobileconfig file. and put together a poor mans OTA enrollment.
Extract the payload <array> to </array> after<key>PayloadContent</key>
to
<key>PayloadDescription</key>
use openssl and encrypt the profile say aes128 use a cert to PEM format
paste it back using the new key
<key>EncryptedPayloadContent</key>
<data>Your encrypted payload stuff here</data>
you can then load a profile containing your cert using IPCU and ship your device
However you have to load the encrypted profile at the destination through Safari/SMS or email.
IPCU wont load encrypted profiles unless the same IPCU encrypted them.