SigningHub - MDM Deployment Guide

The "MDM Deployment" page is intended for developers and administrators who are interested in deploying and managing SigningHub Mobile Applications via Mobile Device Management (MDM) solutions such as MobileIron. It is assumed that the reader has a basic knowledge of MDM concepts and Android/iOS app deployment.

---

Overview

Mobile Device Management (MDM) refers to the administration of mobile devices, such as smartphones and tablets. MDM is typically implemented using a third-party solution provided by the device vendor. Its functionality can include over-the-air app distribution, data security, policy enforcement, and custom configuration management for mobile devices.

MDM solutions can distribute or remove mobile applications like SigningHub and push configuration settings to devices. However, previously, SigningHub Mobile Apps were not capable of handling these configurations on their own.

SigningHub Mobile Applications now support configuration management via standard MDM APIs available on Android and iOS. These APIs allow any compliant MDM solution to push configuration settings, such as server URLs and other app parameters, directly to SigningHub Mobile Apps.

---

Deploy SigningHub Mobile Apps with MobileIron

MobileIron AppConnect containerises apps to protect corporate data at rest while keeping personal data separate. When an application is wrapped with the AppConnect wrapper, it is placed into a secure container on the device. The container encrypts the app’s data, protects it from unauthorised access, and allows it to be removed independently of personal data.

Wrapping the SigningHub Mobile Apps

To enable MobileIron AppConnect functionality:

1. Log in to the AppConnect Wrapping Portal.

2. Navigate to Menu → Wrapped Apps → Create New.

3. Upload SigningHub Mobile Apps:

   • Android: .apk

   • iOS: .ipa

Once uploaded, the apps are automatically wrapped for AppConnect. Android setup is complete at this stage.

SigningHub Mobile Apps AppConnect setup for MobileIron on the SigningHub Mobile App for Android devices is now complete.

---

iOS-Specific Steps

1. Download the signing script: sign_wrapped_app.sh.

   
2. Ensure that a Private Key and distribution certificate from Apple Developer Portal are properly stored in macOS Keychain.

   

Find your signing identity:

Run the following command in your terminal to find your Signing Identity. This identity will be used with the -i argument in the signing script.

security find-identity -p codesigning -v | grep "iPhone Distribution: “Certificate name”"

Sign the wrapped app:

Once you have the Signing Identity, run the signing script on the wrapped .ipa file:

./sign_wrapped_app.sh -i "FBD17EF55AD4B07EEBF3F139DD319D94C28ACF85" -b "com.ascertia.signinghub" SigningHub-wrapped.ipa

---

Checking with App Sanity

AppSanity is a tool that helps identify potential app distribution issues before deploying your app.

1. Log in to the MobileIron AppSanity Portal.

2. Upload the wrapped file:

   • iOS: Upload the wrapped and signed .ipa file and ensure that all checks pass.

   • Android: Upload the wrapped .apk file. Note that Android checks are informational only.

---

Integrate SigningHub Mobile Apps with MobileIron

MDM can push configuration values to the SigningHub mobile apps. Administrators can choose whether users are allowed to edit these values, providing flexibility for deployment. The key configurations include:

• Deploy app via MobileIron

• Server URL

---

Upload the SigningHub Mobile App via MobileIron

SigningHub mobile apps can be deployed through MobileIron:

• iOS: Upload the wrapped .ipa file from the App Store.

• Android: Upload the wrapped .apk file from the Play Store.

For detailed instructions on deploying apps via MobileIron, refer to the MobileIron deployment guide.

---

Server URL

On the MobileIron platform, administrators must add the following keys so that the configured values are reflected in the SigningHub mobile app settings:

Platform	Key	Value
iOS	Server URL	https://api.signinghub.com
Android	server_url	https://api.signinghub.com

---

Reflection on SigningHub Mobile Apps

Once deployed via MobileIron, configuration values such as server URL appear in the SigningHub Mobile App Settings. Administrators can update these values remotely to ensure apps are always correctly configured.

For instructions on updating the server URL via MobileIron, see this guide.

---