Signed and unsigned profiles

Using server 3.2.2, and most clients updated to 10.10.
I have created profiles for each user and these get pushed to their computer.
If the profile gets pushed by Server to the machine, it shows as unsigned in the Profile pane of Systems Preferences.
If I sign into Profiles Manager as admin and download the user profile to then send it through email or put it on a share accessible to the client, that profile will show up as signed on the client machine.
If a signed Profile is installed, and that I make a change to a profile, the profiles gets punched by Server, and is installed as a new unsigned profile. The existing signed profile is left unchanged.
Any hints would be welcome. I would like profiles to be signed. In Server app, the checks Sign Configuration profile is checked.
Thanks.

It is possible if and only if your using different applets. In the same applet there is no possibility of switching signed and unsigned. But I think you can do this by specifying the certificate name.

Similar Messages

Signed and unsigned applet

Hi all,
I want to create an applet that is firstly loaded as a normal (i.e., unsigned) applet. The user can use several features of the applet without seeing a security warning dialog. But when the user uses a certain feature of an applet (such as saving the data to his computer), there will be a security warning dialog that asked the user to allow the (same) applet to access the local harddrive. If the user allows, the applet will be switch to signed mode without having to reload.
In short, is there a way to switch between an unsigned applet to a sign applet without reloading the applet?
Thank you,
vaxim

It is possible if and only if your using different applets. In the same applet there is no possibility of switching signed and unsigned. But I think you can do this by specifying the certificate name.

RSL - what to use Signed or Unsigned ??

Hi , Please help in implementing RSL to our Application . As per the docs it mentions that
Signed RSL will be avialble inside the Player cache , and
Unsigned framework RSLs are cached in the browser cache .
What does this mean ?? Ours ia product based Application .Ours is a intranet web based Application used within the organization . Please suggest me what RSL would be suitable for our Application ?? Thanks in advance .

Signed RSLs are preferred to unsigned RSLs but only Adobe can create signed RSLs. In the SDK "frameworks\rsls" directory there are both signed and unsigned RSLs. The signed RSLs are optimized for production use. The unsigned RSLs in the Flex 4 SDK contain debug information and are meant for debugging only.
-Darrell

HT1727 how do i get my iTunes library from my old computer to my new one? My old computer died and i got a new one. I installed iTunes to it and signed into my profile but it says i have no music. What do i do to get my library back?

how do i get my iTunes library from my old computer to my new one? My old computer died and i got a new one. I installed iTunes to it and signed into my profile but it says i have no music. What do i do to get my library back?

See Recover your iTunes library from your iPod or iOS device.
tt2

Signing and Encryption Error PI 7.0

Hi All,
The scenario is
1) Two XI boxes are connecting with each other using XI adapter. Earlier there was signing and encryption certificate used
for data transfer and was working successfully.
2) From last 2-3 weeks source XI system is getting error in Call adatper as mentioned below. Then we tried to remove signing and encryption certificate so we disable both end the security check. And tried to send normal message but then also we are getting following error in Call adapter in SXI_MONITOR
Signature error Error while valdiating the digital signature. Theerror was com.sap.security.core.ws.wss.NoSecurityHeaderException No wsse:Security header has been defined for role soap:finalActor. Please verify the
Error during message security handling in inbound channel: Security profile 'Check Signature and Decrypt Message'
3) The SM59 connection is working fine. We have tried cache refresh. But still issue is not resolved.
Please guide

Hi Abhay
Probably the issue is with the public keys which are stored in both the XI boxes , as both the keys will be same .
Also check digital signatures which are maintained .
Regards
Ninad

Wrtie unsigned char and unsigned int into a binary file

Hi, I need write some data into some specific file format (.ov2) for other applications to read.
Here is the requirement of the data:
First byte: An unsigned char value, always "2" means simple POI entry
Next 4 byte: An unsigned int value,
Next 4 byte: A signed integer value.
Next 4 byte: A signed integer value
then next : A zero-terminated Ascii string
Here is my code:
                   String name = "name";
                   byte type = 2;
                 int size = name.length() + 13 +1; //1+4+4+4 and there is a 0 at last
                 int a = 1;
                 int b =2;
                 ds.writeByte(type); //1 byte, need save it as unsigned char
                     ds.writeInt(size); //4 //need to be an unsignged int
                     ds.writeInt(ilont); //4 //signed int
                     ds.writeInt(ilatt); //4 //signed int
                     //write zero-terminated ascii string
                     for(int n=0; n<name.length(); n++){
                          ds.writeByte(name.charAt(n));
                     ds.writeByte(0);                    This code could not get the correct result and I think I must do some sign to unsign conversion, but I don't know how to do it. Any help?
Thanks for you attention.

You don't have to do anything special at all. What's in a int or a byte is what you, as a programmer, say it is. Java treats int's as signed but, in fact, with 2's complement arithmatic most operations are exactly the same. Load and store, add and subtract - it makes no difference whether a variable is signed or unsigned. It's only when you convert the number, for example to a wider type or to a string representation that you need to know the difference.
When you read an unsigned byte and you want to widen it to an integer you have to clip the top bytes of the integer e.g.
int len = input.get() & 0xff;This is because, since java sees a byte as signed it will extend the sign bit into the top bytes of the int. "& 0xff" forces them to zero.
Writing it, you don't have to do anything special at all - it will autmatically get clipped. The above is probably the only concesion you'll ever need to make to unsigned binary. (You'd need to do the same thing from unsigned int to long, but this almost never happens).
When I read ov2 files I used a mapped byte buffer, because it allows you to set either big-endian or little-endian and I wasn't sure which ov2 files used. (Sorry, I've forgotten).

Signing and verifing an application

Hi
We have an application contained in a jar file. We need to sign the application so that user can be sure that the application has not been modified maliciously. This is a standard desktop application which will be run on a desktop pc. We sign our jar file with jarsigner and keytool to test it. when it works correctly we buy a "Sun Java Signing Digital ID" from www.verisign.com!
but now i have the problem that i need to check the jar if it's verified on every startup as first! It's to check if nobody has changed classes in the jar to avoid the registration, for example! how can i check on the startup if the jar is verified? must i run a special method in the security manager?
THANKS!

It makes no sense to verify the application with some code inside the application itself.
When the app is patched with malicious code, the code for verifying may be manipulated too.That is true. There is no guaranteed way except to have a secure application loader on the system already.
but it makes it difficulter for criminal persons, when
we check if the classes has been verifyed and check if
the sign is the right! if somebody wants to crack a
application and he is good, he can crack every
application(see winXP ;-)) but we can make it as
difficult as possible for the cracker! when the
complexity is bigger than the costs, most of the
cracker wount crack the application! it is impossible
to secure your application completely!I certainly understand the concern and I have read a fair amount on code signing and other security concerns, but frankly I wonder how ubiquitous this problem really is. Does this type of thing really happen?
There is already a built-in diffculty for a hacker to do this. Bob, the hacker, cannot just take any arbitrary data stream and inject or replace data into it except for the purposes of corrupting the stream to the point of making it not usable. Of course, Bob could simply replace the entire stream with his own application if he knows that the stream is an application originally (if it's an image, it makes no sense, as I'm not going to "execute" an image file, nor the OS, as it's going to open it based on file extension). So the only way for Bob to do anything useful is to first get a copy of the application, then decompile it and or profile it to see what it is and how it works and then spent time figuring out how he can change it to actually get it to do anything except not work.
There is a generally better way to handle this: MD5 or SHA digests for the application package. If you go to get any open source application these days (anything from Apache, as an example), you can get an MD5 sum for it to check against what to download. Of course, the user has to do this, but such is life.

Cisco IPSec and XAuthPassword profile key

I am creating the config profile for iPhone, while using iPhone Configuration Utility I can not enter password for IPSec VPN as the application does not have UI for that.
I had found, though, that manually writing "XAuthPassword" key into the config profile does the trick, iPhone do recognize that entry and sets the password automatically on applying profile.
So, the questions are:
1) Is this config key officially supported on iOS for IPSec VPN? If yes, then starting with which version?
2) Because iPhone Configuration Utility does not allow me to create signed profiles containing XAuthPassword key, can I manually sign the configuration profile I had edited?
Thank you in advance

Hi,
in « iOS Configuration Profile Reference »:
IPSec Dictionary Keys
XAuthEnable – Integer:1 if XAUTH is ON, 0 if it is OFF. Used for Cisco IPSec.
It turn off XAuth and do not ask for User/Password.
You can try this option by editing configuration profile like this:
<key>XAuthEnabled</key>
<integer>0</integer>
<key>AuthenticationMethod</key>
<string>Certificate</string>
but I can`t resolve the problem, I seems it is a ios (4.3.1) bug, because my vpn-server works fine with other vpn-clients, like Cisco VPN Client, with certificate authentication and without xauth.
Best regards!

Missing Code Signing Certificate in Profile Manager

Hi everyone,
Firstly, I'm not a professional and managing a server isn't in my skill set. I have an old Mac mini running the Mavericks server to dabble with.
Recently, the code-signing certificate (I assume self-signed) disappeared from Profile Manager for the option to "Sign configuration profiles" – no idea why, and I'm struggling to get it back, it just doesn't appear in the drop down.
Under "Certificates" in Server.app, and within Keychain Access; it's still in the system and can be seen, where there are two of them.
I've tried renewing both of these through Server.app to see if that would be a quick fix, but nothing.
Could someone advise me on how to create a new verified code signing certificate for use with profile manager?
Kind regards,
Jamie

Tried again. Destroyed OD and recreated – code signing appears. Reboot machine, code signing disappears.
I tried exporting out the Code Signing Cert before rebooting the machine and reimporting after it disappears only to get "This profile cannot be used to sign profiles".
Any idea what could be breaking the code-signing on reboot? Really bizarre.

N95 - Signed v Unsigned Applications - Advantages ...

Hi All,
I understand that an application needs to be signed to install in on the N95 and that I can 'self sign' applications.
I guess that this is to make it clear that if I install an unsigned application then it is 'at my own risk' - fair enough.
So, on the face of it, a signed application is better than an unsigned one (on the grounds that you know exactly who produced it, and that the application install file has not been tampered with subsequent to release).
However, in some places I have seen mention of applications being unsigned and that this is deemed an advantage in some way - this is an example (I have to guess that the link will work so apologies if it doesn't):
http://mosh.nokia.com/content/63188744262773E5E040050A44301055
Can anyone explain why they deem it to be an advantage that it is unsigned?
Thanks,
Alan.

Hi
This is the latest version of Advanced Call Manager only released a week ago by webgate.bg for which you could either trial it for free for 30 incoming calls or purchase software for $25.50 which would be signed for your specific IMEI.
One case in point of an unsigned application was RotateMe which many N95 users self-signed and installed before the ASR feature was incorporated in firmware upgrade late in it's life.
Happy to have helped forum in a small way with a Support Ratio = 37.0

I need help to find and open a job app that I exported, was able to fill out and sign and saved and now can't open it? What did I do wrong?

I need help to find and open a job app that I exported, was able to fill out and sign and saved and now can't open it? What did I do wrong?

What file format did you export it to?

Logical system and partner profile configuration

Hi,
I have a SQL server which is defined as a Business system in my landscape. It is sending records to ECC 6.0 which makes it a JDBC to IDOC scenario (inbound IDocs)
First question is do I have to mention a logical system name for the SQL server Business system too ?
Second question is do I create a Logical system in the ECC system (BD54/SALE) for the SQL system or would it be for the client of the ECC system itslef?
Third question is do I maintain partner profile configurations in WE20 for the SQL business system or for the ECC business system?
Thanks in advance.
Cheers,
S

Hi Sam,
> First question is do I have to mention a logical system name for the SQL server Business system too ?
Yes, In SLD You have to specify logical system name of the SQL server business system while creating SQL system.After importing business system into Integration directory,in Adepter-Specific Identifiers you can see logical system name of SQL server business sytem which you defined in SLD.
> Second question is do I create a Logical system in the ECC system (BD54/SALE) for the SQL system or would it be for the client of the ECC system itslef?
Yes,You have to create Logical system in ECC system for SQL system(Logical system name must be with the same name as logical system name you have given in XI SLD in previous question)
> Third question is do I maintain partner profile configurations in WE20 for the SQL business system or for the ECC business system?
In WE20 You have to maintain partner profiles for SQL server Logical system
For example: If SQL server Business system name is SQLDEVBS and logical system name is SQLDEVLS
In ECC you have to create logical system as SQLDEVLS and
Partner profiles for SQLDEVLS in WE20.
Please let me know if you have any issues.
Cheers,
JAG

Trying to login to software program known as hamspher (vip simulated ham radio, it downloaded the program but it will not allow me to login with call sign and pin. it has to be opened with what they call a jar file. how do i do this?

trying to login to software program known as hamspher (vip simulated ham radio, it downloaded the program but it will not allow me to login with call sign and pin. it has to be opened with what they call a jar file. how do i do this?

This is compatible with Mac? Especially Snow Leopard (if that is what you'e running)?
Have you considered posting your question in their forums?
Here is some information re. the jar file:
http://ostermiller.org/opening_jar_files.html

Data integrator for HP-UX missing data quality and data profiling

Hi All,
I have installed ODI 10.1.3.40.0 from odi_unix_generic_10.1.3.4.0.zip in HP unix 11.23.
Data quality and data profiling is missing in that zip ? Could anyone please help me how to get installer of data quality and data profiling for Oracle data integrator in HP UX 11.23.
Any response will be highly appreciated.
Thanks in advance.
regards
Umapada
Edited by: user10612738 on Nov 28, 2008 1:54 AM

The integrated packaged( ODi, data quality and data profiling) for HP-UX wount available till 10.1.3.5.0 which will be released by this year end.

On Firefox 4, how can I put one "new tab" on the "tab bar" (The + sign) and one next to the "back/forward" buttons (as in FF 3.6)?

On Firefox 4, how can I put one "new tab" on the "tab bar" (The + sign) and one next to the "back/forward" buttons (as in FF 3.6)?
In my current Firefox, the "new tab" icon/item from the "customize" pop-up window menu of items is placed next to my home, back, forward buttons near the top-left of my header (Button 1 for "new tab"). Then, the tab bar automatically come with a small tab (with a + sign) to the right of your last tab opened (so you click on + and a new tab opens. Button 2 for "new tab"). I like to have this "new tab" button twice (as a + mini tab, and next to my "home icon".
When I upgraded to Firefox 4, I seemed to be only able to "customize" or use the "new tab" in one place. Either as an icon next to home button, or as a "+ minitab", but NOT both.
What can I do to put this button in Firefox 4 on BOTH places???
Your help is really appreciated. I want to upgrade, but I want my buttons on both places...
I upgraded to FF 4, but downgraded again just because this feature... that's just me of coarse :-)

*New tab toolbar button: https://addons.mozilla.org/firefox/addon/new-tab-toolbar-button/

Signed and unsigned profiles

Similar Messages

Maybe you are looking for