Ios - shared iPad - Device cert

VPN
1

I have deployed a device cert via. NDEP/SCEP to the iPad succesfully. (it’s a supported MDM playload for Shared iPads)

Logging into the device the settings app is seriously limited (due to it being a Shared iPad), so I there’s no way to see the certs on the device. Launching the app (Cisco AnyConnect) that needs to use the cert for VPN can’t find any certs on the device to use.

The configs deploy and work on non-Shared iPads without a hitch, so they should be fine.

Is this another strange limitation of Shared iPads? Does anyone else have experience in deploying certs (user or device) to Shared iPads?

2

Answering my own question: you can’t use VPN with shared iPad:

https://support.apple.com/en-us/guide/deployment/depc3485c493/web

3

I don’t know if it’ll work for you but I pushed a VPN configuration profile using ‘Cisco AnyConnect’ drop-down and then configured the settings in the payload. I pushed the AnyConnect application and it picked up on the profile and I was able to successfully connect to VPN with username/password on a Shared iPad.

4

Hi, I have the same issue. Cisco Secure Client can’t see the certificate on Shared iPad. Do you know if this is still a limitation. The link you posted is giving a lot of results. Could you share the link that has specifics about VPN on shared iPad. Thanks!

5

We use anyconnect as well.

Just to be clear you didn’t use any certificates then in your profile, right?

We could switch auth from cert to basic auth (username/pw) - but it’s not feasible for our usecase. We need the vpn to be “silent” for the end users in apps that trigger vpn on demand.

6

I haven’t tested it since as I changed jobs and I’m not doing iOS MDM anymore

7

I didn’t use any certificates in profile just ‘username/password’ in authentication method where end user is prompted.

I stumbled upon it by accident and thought it might help. Are you still using shared iPads? So far my experience is that it is a little glitchy and not fully developed. I was expecting more of a windows type log in/out.

8

We don’t really use shared iPads that much because of this issue and others. It’s definitely not fully mature yet. Hopefully they’ll poor some energy into it some day. Haven’t heard anything in regards to iPads 16 and shared ipad mode. So I doubt it’s something they focus on.

I appreciate your input - but unfortunately it doesn’t solve our issue. Thanks for sharing though!