Apple has introduced changes to iOS security requirements and framework architecture in the release of iOS8. Apple now requires dynamic libraries to be signed with the same team identifier as the main app. Due to these changes, you are required to re-build you work hub, re-sign and re-wrap all wrapped enterprise applications. This action is needed to provide wrapped application support for your device users running iOS8. Please perform the following steps:
A. Rebuild your App Center App to Work Hub
In order for your users to use applications on devices running iOS8, you must rebuild the App Center App to Work Hub. Your users will receive a push notification indicating an updated version of their Work Hub is available for download and installation.
From the Member Center click Certificates, Identifiers & Profiles. Click Provisioning Profiles
You see a list of iOS Provisioning Profiles. Locate the provisioning profile you created that was used to originally sign the app when it was built. This provisioning profile includes the App ID + Distribution Profile. Within the App ID is included the Team ID. You must re-sign your apps using a valid Team ID from this provisioning profile. Click the provisioning profile and click Download.
Once you have downloaded the provisioning profile for your app, launch Xcode6.
Open the existing project associated with your app.
Rebuild the app using the provisioning profile you downloaded in step 3. (in Xcode select Product -> Archive -> Save for Enterprise or Ad Hoc development )
Once the application has been rebuilt using Xcode6, upload the application to your Mobility Suite 5.0 tenant. This is done by accessing the Apps tab from your Mobility Manager console and selecting your app. Once the app has been selected, click Replace located in the middle of the right pane. Select the application you rebuilt with Xcode6 in step 6 and upload.
Upon successful upload of your app, your users will receive a push notification indicating an updated version of your app is available for download and installation.
Re-Signing an App Without Source Code
Even without access to the source code, apps can be re-signed with an updated provisioning profile. Use the attached script(s) (resign_appid.sh or resign.sh) to re-sign the app:
1. Run the resign script ./resign_appid.sh --ipa yourIPA.ipa --profile yourProvisingProfile --identity "iPhone Distribution: Developer Name (xxxxxxxxxx)" --out yourNewResignedIPA.ipa 2. Upon successful upload of your app, your users will receive a push notification indicating an updated version of your app is available for download and installation.
Current known issues
Work Hub ‘installing’ screen does not update To install your work hub, you click on a work hub install link you receive in an email. This will direct you to a download page. You are able to successfully download the Work Hub. When you click “Install Work Hub”, the screen updates to “Installing”.
The screen will not exit to the home page where you see the work hub icon and the installation progress. You remain at the “Installing” screen until you manually press the home button. You see that the work hub installation has completed.
Remote Management Trust confirmation During the installation of your MDM profile, you will be presented with a Remote Management trust confirmation box. This allows you to trust the MDM profile source (Mobility Suite) to allow for remote management (MDM) of your device :
Press Trust to continue with the MDM profile installation.
‘Installing MDM’ screen does not update to reflect successful completion of MDM profile install After you have completed the MDM profile installation, you see the following screen:
When you press done, the screen will change to the following:
This screen will not update to reflect successful completion of MDM. You must press the home button and press you work hub icon. You are then connected to your appstore.
Secure Web App does not load after it is re-wrapped A Secure Web App will stop when launched on an iOS8 device after the application has been re-wrapped. The solution to this issue is to delete the secure web app and create anew.
Imported Document ID: HOWTO101927
This version of the resign.sh file is able to successfully codesign .ipa files that do not include a ResourceRules.plist and ensures the appid of the embedded.mobileprovision is overwritten with the new mobile provisioning profile's appid.