Can't deploy MDM Config via inTune

[sknott365]

Hi, I've got a basic config for the SEB Browser that I'm trying to deploy via InTune to our iPads. It doesn't seem to work.
I believe this is because the PLIST XML file that I export from the SEB Browser contains a key type of data (examKeySalt) which isn't supported in InTune, only things like boolean, string etc, not data.

Any thoughts? Is the examKeySalt absolutely needed? Or has anyone got a workaround for intune? Thanks!

Stephen

[danschlet]

No, it's not necessary, just remove the examKeySalt key/value.
But please also report to the InTune vendor that they must support data key types, as that is a absolutely valid key type in the plist format! https://en.wikipedia.org/wiki/Property_list

[danschlet]

Btw. for exam configurations, the examKeySalt value increases the difficulty for replay attacks, but only if it is generated randomly for each exam round or better for each student. This would only be doable if the assessment system generates SEB exam settings ("dynamically").
In the case of MDM configuring devices to open the start page of some assessment system, you couldn't really generate random examKeySalts for each device, nor could the assessment system automatically calculate the ConfigKey for each device/student.