Windows Phone 8.1 Enterprise Device Management Protocol Version: Windows Phone 8.1 GDR2 Last updated: February 1, 2016 Proprietary Notice © 2015 Microsoft. All rights reserved. This document is provided “as-is”. Information and views expressed in this document, including URL and other Internet website references, may change without notice. You bear the risk of using it. Some examples depicted herein are provided for illustration only and are fictitious. No real association or connection is intended or should be inferred. This document does not provide you with any legal rights to any intellectual property in any Microsoft product. You may copy and use this document for your internal, reference purposes. This document is confidential and proprietary to Microsoft. It is disclosed and can be used only pursuant to a non-disclosure agreement. Contents Windows Phone 8.1 Enterprise Device Management Protocol ......................................................................................... 1 Summary .................................................................................................................................................................................................. 1 Connecting to the management infrastructure (enrollment) ............................................................................................. 2 Conceptual flow ................................................................................................................................................................................ 2 Enrollment UI ..................................................................................................................................................................................... 4 Launch workplace control panel from hyperlink ............................................................................................................. 5 Supported protocols summary ................................................................................................................................................... 6 Discovery request (Steps 2–3) ................................................................................................................................................ 6 Certificate enrollment policy (Steps 4–5) ........................................................................................................................... 6 Certificate enrollment (Steps 6–7) ......................................................................................................................................... 6 Management configuration (Step 8) .................................................................................................................................... 6 Discovery web service (Updated in Windows Phone 8.1) ................................................................................................ 6 Prerequisite .................................................................................................................................................................................... 6 Description ..................................................................................................................................................................................... 6 Web Authentication Broker Support in enrollment process (New in Windows Phone 8.1) .......................... 9 HTTP errors .................................................................................................................................................................................. 11 User interface ............................................................................................................................................................................. 11 Certificate enrollment policy web service ........................................................................................................................... 11 Description .................................................................................................................................................................................. 11 SOAP faults .................................................................................................................................................................................. 15 Certificate enrollment web service ......................................................................................................................................... 15 Description .................................................................................................................................................................................. 15 Request for certificate renewal ............................................................................................................................................ 22 Automatic MDM client certificate renew via Renew On Behalf Of (ROBO) function in WSTEP ................ 24 Certificate renew schedule configuration ....................................................................................................................... 26 Updateability consideration ................................................................................................................................................. 26 Response for certificate renewal ......................................................................................................................................... 26 Configuration service providers supported during MDM enrollment and certificate renewal ................. 27 SOAP faults .................................................................................................................................................................................. 27 Best practice tips ........................................................................................................................................................................... 28 General notes ............................................................................................................................................................................. 28 Certificates ................................................................................................................................................................................... 29 Disconnecting from the management infrastructure (unenrollment) .......................................................................... 30 User-initiated disconnection .................................................................................................................................................... 30 User unenrollment notification to the MDM server ................................................................................................... 31 IT admin–requested disconnection........................................................................................................................................ 32 Enterprise settings, policies and app management ............................................................................................................. 33 DM SyncML functionality support .......................................................................................................................................... 35 OMA DM standards ................................................................................................................................................................. 35 OMA DM protocol common elements ............................................................................................................................ 37 Device management session ................................................................................................................................................ 38 OMA DM provisioning files .................................................................................................................................................. 39 File format .................................................................................................................................................................................... 40 SyncHdr element ....................................................................................................................................................................... 40 Code example ............................................................................................................................................................................ 41 SyncBody element .................................................................................................................................................................... 41 Code example ............................................................................................................................................................................ 41 Update phone settings example......................................................................................................................................... 41 Code example ............................................................................................................................................................................ 42 Server requirements for OMA DM ..................................................................................................................................... 42 Enterprise OMA DM