---
title: Providing information about your device management service
framework: devicemanagement
role: article
role_heading: Article
path: devicemanagement/providing-information-about-your-device-management-service
---

# Providing information about your device management service

Create a service configuration entry point to your device management service to access frequently used information.

## Overview

Overview Add an unauthenticated HTTPS request entry point to your device management service to make it easier to access useful information about your service. Create the entry point using the endpoint /MDMServiceConfig; for example, https://mdm.example.com/MDMServiceConfig. The service should return a UTF-8 JSON-encoded hash (Content-Type: application/json; charset=UTF8) with the following values in the body of its response: Provide this URL even if your device management service doesn’t require additional certificates because it’s using a trusted SSL certificate. However, provide either an empty body (Content-Length: 0) or an empty array JSON string ('[]') . Omit this key if the device management service doesn’t require a Trust Profile because it’s using a trusted SSL certificate. Don’t return a URL that would generate an empty profile. tip: Provide a value for dep_anchor_certs_url if you provide a value for dep_enrollment_url. Example of an MDMServiceConfig request: // Format GET https://mdm.example.com/MDMServiceConfig

// Response body {    "dep_enrollment_url": "https://mdm.example.com/devicemanagement/mdm/dep_mdm_enroll",     "dep_anchor_certs_url": "https://mdm.example.com/devicemanagement/mdm/dep_anchor_certs",     "trust_profile_url": "https://certs.example.com/mdm/trust_profile" } Example of the dep_anchor_certs_url key: // Format GET https://mdm.example.com/devicemanagement/mdm/dep_anchor_certs

// Response body (truncated) ["MIIEKDCCAxCgAwIBAgIEOjznoTALBgkqhkiG9w0BAQswfjEkMCIGA1UEAwwbU3ly \nYWggQ2VydGlmaWNhd...SVVTo9ll1Lv3OJGqBkxPl9TCC\nfYYnArwzlk4qm1tP\n"] Example of the trust_profile_url key: // Format GET https://certs.example.com/mdm/trust_profile

// Response body <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict>     <key>PayloadContent</key>     <array>         <dict>             <key>PayloadContent</key>             <data>             MIIEKDCCAxCgAwIBAgIEOjznoTALBgkqhkiG9w0BAQswfjEkMCIG             ...             9TCCfYYnArwzlk4qm1tP             </data>             <key>PayloadDescription</key>             <string>Installs the Root certificate for Example Corp.</string>             <key>PayloadDisplayName</key>             <string>Root certificate for Example Corp</string>             <key>PayloadIdentifier</key>             <string>com.apple.ssl.certificate</string>             <key>PayloadOrganization</key>             <string>Example Corp</string>              <key>PayloadType</key>             <string>com.apple.security.root</string>             <key>PayloadUUID</key>             <string>B90FA650-5A7D-496A-8C84-0D81C9EBCE6E</string>             <key>PayloadVersion</key>             <integer>1</integer>         </dict>     </array> <key>PayloadDescription</key> <string>Configures your device to trust the device management service.</string> <key>PayloadDisplayName</key> <string>Trust Profile for Example Corp</string> <key>PayloadIdentifier</key> <string>com.apple.config.mdm.example.com.ssl</string> <key>PayloadScope</key> <string>System</string> <key>PayloadType</key> <string>Configuration</string> <key>PayloadUUID</key> <string>94cdf5c0-bde0-0131-1ed5-005056831d08</string> <key>PayloadVersion</key> <integer>1</integer>  </dict> </plist>

## See Also

### Connectivity

- [Managing connections](devicemanagement/managing-connections.md)
- [Managing certificates for device management services and devices](devicemanagement/managing-certificates-for-device-management-services-and-devices.md)
- [Dealing with inactive managed devices and invalid push tokens](devicemanagement/dealing-with-inactive-managed-devices-and-invalid-push-tokens.md)
