Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Use the interactive explorer to search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.
The payload that configures a PKCS #12-formatted certificate.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
Payload Certificate Filename PayloadCertificateFileName The file name of the enclosed certificate. | string | optional | — | ✓Yes | iOS (4.0+)macOS (10.7+)tvOS (9.0+)visionOS (1.0+)watchOS (3.0+) |
Payload Certificate Data PayloadContent The binary representation of the payload, encoded in Base64. | data | required | — | ✓Yes | iOS (4.0+)macOS (10.7+)tvOS (9.0+)visionOS (1.0+)watchOS (3.0+) |
Password Password The password to the identity. | string | optional | — | ✓Yes | iOS (4.0+)macOS (10.7+)tvOS (9.0+)visionOS (1.0+)watchOS (3.0+) |
Allow All Apps Access AllowAllAppsAccess If `true`, the system allows apps access to the private key. Available in macOS 10.10 and later. | boolean | optional | false | ✓Yes | macOS (10.10+) |
KeyIsExtractable KeyIsExtractable If `false`, the system doesn't tag the private key data as extractable in the keychain. | boolean | optional | true | ✓Yes | macOS (10.15+) |
