Questions[iphone](server)

Mozilla/5.0 (iPhone; CPU iPhone OS 7_1 like Mac OS X) AppleWebKit/536.26
  (KHTML, like Gecko) GSA/3.2.1.25875 Mobile/11D167 Safari/8536.25

What's that "GSA" part?

I've tried to figure it out, but googling wasn't enough (the only meaningful results were about the gsa-crawler, but it doesn't look like it's the case). But for Safari I used to expect something like

Mozilla/5.0 (iPhone; CPU iPhone OS 7_1 like Mac OS X) AppleWebKit/537.51.2
  (KHTML, like Gecko) Version/7.0 Mobile/11D167 Safari/9537.53

Of course, I'm giving for granted that it's not a faked string...

I'm trying to provision an iOS device to be managed using the Apple MDM capabilities. Using the iPhone Configuration Utility, I'm trying to create a configuration profile. Under the Mobile Device Management section, I can setup everything except for the "Identity" entry, which always just says "Add credentials in the Credentials payload."

According to the iPhone Configuration Utility documentation for the Identity field:

Select the certificate that the device uses to identify itself to the MDM server. Add the certificate to the device using the Credentials Settings, or use SCEP Settings to provide instructions for the device to obtain the certificate using SCEP.

I don't have a SCEP server, so I'm trying to use a certificate. However, I can't figure out how to generate a valid certificate. No matter what certificate I add to the Credentials settings, it never becomes available for selection in the Identity field.

When I attempt to install the configuration profile without any identity certificate set, I get the error "Profile Failed to Install", and the Console shows the error "The identity certificate for com.test.test.mdm1 could not be found."

Has anyone succesfully provisioned a device for MDM using this system?

I have a Ubuntu Lucid Lynx VM which I've been tinkering with. I want to set up a VPN and I am happy to learn how to do it on my own but the vastness of options makes my head spin, so I'm just looking for pointers.

Factors I want considered for my setup

• Each user needs personal authentication (not one password for all)
• I want know what OS the client is using (android / iphone other)
• I want to track how much bandwidth is being used by each individual
• Although security is important, it's mainly for bypassing China's great firewall (reach facebook / twitter) so I'm not trying to protect pentagon files. Security is good, as long as it doesn't involve hours of complicated configurations.
• Prevent the same user from using multiple devices to access vpn at the same time
• Any sugggestions?

So my questions are:

• What protocol should i use to be compatible with Android (say 1.6+) and iPhones?
• What administrative software should I use (free preferably but willing to invest a little)?
• What guides / tutorials can you recommend that are a little bit less confusing than this?

Android:

16 IPSec VPN Tunnels
8 L2TP VPN Tunnels (Dial-in: 4, Dial-out: 4)
8 PPTP VPN Tunnels (Dial-in: 4, Dial-out: 4)

• Embedded IPSec & PPTP client/server
• IKE key management
• DES, 3DES and AES encryption for IPSec
• Embedded powerful 3DES accelerator
• MPPE Encryption for PPTP
• L2TP within IPSec
• L2TP/PPTP/IPSec pass-through

iPhone

• L2TP / IPSec
• MSChapV2 Password
• RSA SecurID
• CRYPTOCard
• PPTP
• MSChapV2 Password
• RSA SecurID
• CRYPTOCard
• Cisco IPSec VPN
• Password
• RSA SecurID
• CRYPTOCard
• Certificate

NOTES

• I'll be sure to add a bounty after the 2 day period, hope this question can help other people who would like to create a similar setup.
• The title of this question is not that great, feel free to edit
• I don't need all answers answered any pointers would help :)

Is there a way to connect an iPhone to our company OpenVPN server?

I just got my iPhone, and am on an app-downloading spree. Help me build my list of apps!

I'm marking this question as fun so that we can also include apps that aren't necessarily useful for IT people, but that IT people might enjoy. However, if it is more of a "fun" app, please mark your answer community wiki.

Also, here's the comparable question on stackoverflow.