The keyword itms-services://?action=download-manifest&url=https:// refers to a critical URL scheme used by Apple's iOS and iPadOS for "Over-the-Air" (OTA) application distribution. This protocol allows developers to distribute in-house enterprise apps or ad-hoc builds directly to devices via a web link, completely bypassing the public Apple App Store. How the itms-services Protocol Works
The protocol functions as a trigger for the iOS native installer. Instead of downloading a large application file (.ipa) directly, the browser (typically Safari) reads a small instruction file known as a manifest. Itms-services Action: Download-manifest Amp-url Https
Distributing internal or enterprise iOS applications doesn’t always require the App Store. For developers and IT admins, the itms-services protocol is the key to seamless, "over-the-air" (OTA) installations. This method allows you to host an app on your own secure server and let users install it with a single tap. What is itms-services://?action=download-manifest?
The itms-services protocol is a special URL scheme used by iOS to trigger the installation of an application from a web server. Unlike a standard link that might download a file, this protocol tells the device to find a "manifest" file (a .plist) which contains all the instructions needed to download and install your actual app file (.ipa).
According to Apple Support, this is the standard way to distribute proprietary in-house apps directly to devices. The Anatomy of the Installation Link
To make this work, you need a specifically formatted URL. It typically looks like this:
itms-services://?action=download-manifest&url=https://yourserver.com Breaking down the parameters:
itms-services://: The protocol that alerts iOS this is a service request for the iTunes/App Store system (even though it's hosted privately).
action=download-manifest: Tells the system the first step is to grab the manifest file.
url=https://...: The absolute path to your manifest .plist file. This must be an HTTPS link for security. How to Set It Up
Prepare your Files: You need your signed .ipa (the app) and a manifest.plist file. You can generate these using Xcode during the "Distribute" process.
Host on HTTPS: Upload both files to a secure web server. Experts at 219 Design emphasize that your OTA deployment link must use a valid SSL certificate to avoid installation errors.
Create the Link: Wrap your itms-services URL in a standard HTML anchor tag: Download In-House App Use code with caution. Copied to clipboard Common Challenges
Browser Compatibility: While Safari fully supports this protocol, some in-app browsers (like those found in chat apps) may result in a blank screen. Users on GitHub have noted issues with itms-services in third-party browsers, so it is always best to instruct users to open the link in Safari.
URL Encoding: If your .plist path contains spaces or special characters, you must encode them properly. Developers on Stack Overflow often discuss the nuances of URL parameters in itms-services when debugging failed triggers.
Invalid Characters: Be careful with special characters in the URL string; Reddit contributors have warned that unsupported characters can invalidate the entire deployment URL. Distribute proprietary in-house apps to Apple devices
The complete URL syntax you are looking for is typically used for Over-the-Air (OTA) iOS app installations. The "AMP" part often refers to the & HTML entity used to encode the ampersand in a link. The complete, standard text for this link in HTML is:
itms-services://?action=download-manifest&url=https://YOUR_URL_HERE/manifest.plist Use code with caution. Copied to clipboard Breakdown of the Link Components
itms-services://: The custom URL scheme that triggers the iOS wireless installation service.
?action=download-manifest: Tells the system the specific action to perform, which is to download the app's configuration manifest.
&url=: The parameter defining where the manifest file is hosted.
Note: In HTML code, this is often written as &url= to comply with HTML character entity requirements.
itms-services://?action=download-manifest&url=https://... string is a specialized URL scheme used for the Over-the-Air (OTA) distribution
of iOS applications. It allows developers to install proprietary in-house or ad-hoc apps on devices without going through the public Apple App Store. Apple Support Core Components itms-services:// Itms-services Action Download-manifest Amp-url Https
: The protocol that triggers a system-level process on iOS (specifically handled by Safari) to start an app installation. action=download-manifest
: Tells the system to fetch a specific XML manifest file containing the metadata for the installation. Apple Support url=https://... : Specifies the direct path to a
manifest file. This file identifies where the actual application package ( file) is hosted. Apple Support Technical Requirements
For this action to work successfully, several security and technical conditions must be met:
iOS itms-service not working, not able to install the app via safari
2 Answers. Sorted by: 2. You need a valid HTTPS cert to use this. You can. get a free cert at letsencrypt.org. upload your app to ... Stack Overflow Distribute proprietary in-house apps to Apple devices
Apps need to be in . ipa format and be built with an in-house provisioning profile. They need to have an XML manifest file. They n... Apple Support
itms-services://?action=download-manifest&url= #1490 - GitHub
Description. The telegram in-app browser does not currently support the "itms-services://?action=download-manifest&url=" URL forma... HTTPS Requirement : The manifest file and the be hosted on a server using a valid, trusted
certificate. Self-signed certificates often cause the installation to fail. Stack Overflow The Manifest (
: This XML file must include the app's bundle identifier, version, and the full URL to the Apple Support Browser Dependency : The link is primarily designed to be opened in
; other browsers or in-app browsers (like Telegram's) may not trigger the installation prompt correctly. Provisioning
: The device's Unique Device Identifier (UDID) must be included in the app's provisioning profile, or the app must be signed with an Enterprise certificate. Apple Support Common Use Cases Enterprise Distribution
: Large companies use this to distribute custom apps to employees internally. Apple Support Beta Testing
: Development teams share ad-hoc builds with testers for feedback before an official release. Stack Overflow App Updates
: In-house apps can use this scheme to prompt users to download a newer version directly from within the existing app. Apple Support Common Troubleshooting Issues URL Encoding
: If the URL path contains spaces, they must be "double-escaped" (e.g.,
) because the system unescapes the value once before processing it. MIME Types : The web server must be configured to serve files with the correct MIME types ( application/xml application/octet-stream respectively). App Store Rejection : Apps submitted to the public App Store will be
if they contain this URL scheme, as Apple does not allow public apps to install executable code from third-party sources. pc soft windev To see this in action, you can refer to the official Apple Platform Deployment Guide for proprietary app distribution. manifest.plist
template to see how to structure the file for your download link?
[WM 24] iOS app rejected from app store for itms-services URL ...
That is a known WM24 problem, i have read in other posts on the french forum that they actually made a patch to solve that problem... pc soft windev
Why can't Apple just add “itms-services” as a forbidden URL ... The keyword itms-services://
> The app installed or launched executable code. Specifically, the app uses the itms-services URL scheme to install an app. Hacker News
iOS itms-service not working, not able to install the app via safari
2 Answers. Sorted by: 2. You need a valid HTTPS cert to use this. You can. get a free cert at letsencrypt.org. upload your app to ... Stack Overflow itms-services://?action=download-manifest Not Work in IIS
3 Answers. ... Change the http://www.example.com/test.ipa to where ever you located you ipa for install. Create you Install. plist... Stack Overflow
wireless iphone app distribution - problem with itms-services ...
17 Answers 17. Sorted by: Reset to default. 17. The answer is actually very simple: The URL needs to be "double-escaped", i.e. itm... Stack Overflow Distribute proprietary in-house apps to Apple devices
Manually update proprietary in-house apps For proprietary in-house apps distributed using a device management service, you can use... Apple Support Distribute proprietary in-house apps to Apple devices
Apps need to be in . ipa format and be built with an in-house provisioning profile. They need to have an XML manifest file. They n... Apple Support Distribute proprietary in-house apps to Apple devices
Apps need to be in . ipa format and be built with an in-house provisioning profile. They need to have an XML manifest file. They n... Apple Support How To Deploy to an IOS Device Without The App Store
Use the itms-services:// Safari Link provided by your development team. Navigate/browse to that link in Safari. MAKE SURE YOU FEED... 219 Design itms-services // action=download-manifest url as local file
2. iOS5 app will not download with itms-services on IIS, but works on Apache. 4. Use any link in itms-service links for app distri... Stack Overflow
itms-services://?action=download-manifest&url= #1490 - GitHub
Description. The telegram in-app browser does not currently support the "itms-services://?action=download-manifest&url=" URL forma...
itms-services not working with sel… | Apple Developer Forums
if apple has blocked the entirely selt-signed certificate? could not find any article related from apple forum though. Kindly enli... Apple Developer Distribute proprietary in-house apps to Apple devices
Manually update proprietary in-house apps. For proprietary in-house apps distributed using a device management service, you can us... Apple Support itms-services://?action=download-manifest Not Work in IIS
3 Answers. ... Change the http://www.example.com/test.ipa to where ever you located you ipa for install. Create you Install. plist... Stack Overflow
Enterprise app deployment - chars in the URL invalidating the ...
itms-services://? action=download-manifest&url=http://example.com/my%20Folder/ca/app.plist. You've got a URL wrapped within a URL ... r/iOSProgramming Distribute proprietary in-house apps to Apple devices
Use a website to distribute the app. For wireless app installation, iOS, iPadOS and visionOS apps need to meet the following requi... Apple Support Distribute proprietary in-house apps to Apple devices
Before you can distribute proprietary in-house apps to iPhone, iPad, Apple TV, Apple Vision Pro, and Apple Watch devices, you need... Apple Support Distribute proprietary in-house apps to Apple devices
Prepare a proprietary in-house app for wireless distribution To prepare your proprietary in-house app for wireless distribution, y... Apple Support xykong/itms-services: A command line tool for ... - GitHub
A command-line tool for iOS over-the-air (OTA) app distribution via Apple's itms-services:// protocol. Given a . ipa file and a pu... software-package
Магия TestFlight, или Подробнее о технологиях ... - Habr
“itms-services” означает использование Custom URL Scheme – технологии, которая позволяет приложениям взаимодействовать – вызывать ... How To Deploy to an IOS Device Without The App Store
A URL that starts with the prefix itms-services:// and ends with the location of your manifest. plist. (The bottom section of this... 219 Design How To Deploy to an IOS Device Without The App Store
A URL that starts with the prefix itms-services:// and ends with the location of your manifest. plist. (The bottom section of this... 219 Design Not able to download iOS build from Downloads section
Then you need to upload that manifest file and IPA file in the same folder on web server. Once all these steps are complete then t... community.vahanacloud.com
Distributing iOS applications within a company from a website ...
Distributing iOS applications within a company from a website without App Store * Why would one need App Center or a similar servi... decovar.dev
itms-services://?action=download-manifest&url=[URL] protocol is a special URL scheme used by iOS to facilitate "Over-the-Air" (OTA) installation of proprietary or in-house enterprise applications. Apple Support Quick Implementation Guide
To distribute an app via this method, you must host three critical components on a web server: : The actual compiled iOS application. manifest file : An XML file that tells iOS where to find the and related metadata. An HTML page
: A webpage with a link formatted to trigger the installation. Apple Support 1. Requirements for Success HTTPS is Mandatory manifest, the
file, and the HTML page must all be hosted on a server with a valid, trusted SSL certificate
. Self-signed certificates often fail unless manually trusted in the device settings. Browser Support : Users must open the link in
. Other browsers or in-app browsers (like Telegram or Facebook) often fail to trigger the installation dialog. MIME Types
: Ensure your server is configured to serve these files correctly: application/octet-stream application/xml 2. Creating the Manifest ( manifest.plist should point to the direct HTTPS URL of your file. Below is a simplified example: > < > < > < > < > < > < >software-package < > < >https://yourserver.com < >metadata < > < >bundle-identifier < >com.yourcompany.myapp < >bundle-version < > < > < >software < > < >My Great App
"itms-services://?action=download-manifest&url=https://yourserver.com" > Click here to Install App
: If your URL contains special characters or spaces, you must use URL encoding . For example, a space in the filename should be encoded as Troubleshooting Common Errors Distribute proprietary in-house apps to Apple devices
itms-services from your company’s intranet.amp-urlIn your keyword, this appears as amp-url. However, due to encoding or typographical errors in some documentation, this is almost always meant to be &url=. The ampersand (&) is the parameter separator in URL query strings.
itms-services://?action=download-manifest&url=https://...& is often encoded as & amp; (without space). A raw ampersand in an HTML attribute might get misinterpreted, leading to people seeing amp-url. In practice, you use &url=.When users click your itms-services link, several failures can occur. Here’s how to diagnose them:
"Cannot connect to server"
https:// everywhere."Unable to Download App" / "The manifest file is invalid"
amp-url mistake (using literal & in the href string).&url= not amp-url= or &url=."A valid provisioning profile is required"
.ipa was signed with a development certificate, not an Enterprise or Ad Hoc distribution certificate.The link does nothing (doesn't open)
itms-services scheme (many in-app browsers block it).<a href="#" onclick="window.location.href='itms-services://...'; return false;">SSL / Invalid Certificate errors
Let's dissect the phrase into its functional parts: