Patent ID: 8473743

Claim:
A machine implemented method for managing a wireless device, the method comprising: sending, from the wireless device, an enrollment request to a management server addressed in a management profile stored in the wireless device, wherein the management profile includes a network address of the management server, an identity certificate, and a push string to be used by the wireless device to receive push notifications, and the enrollment request is a request to grant control of the wireless device to the management server in accordance with the management profile, the enrollment request including at least one device identifier uniquely identifying the wireless device, and a first verification string for verifying trust of the push notification, the first verification string uniquely identifying the wireless device; in response to receiving a push notification associated with the push string from a push server, verifying a trust of the push notification against the management profile stored in the wireless device, wherein verifying comprises extracting a second verification string from a payload of the push notification and comparing the first verification string to the second verification string, wherein the trust is verified when the first verification string matches the second verification string; establishing a secure network session with the management server if the trust is verified, the network session being secured via a certificate in the management profile; and performing management operations for management commands received over the secure network session to manage the configurations transparently to a user of the wireless device according to a control of configurations of the wireless device.