A reference to a PKCS #1 or PEM encoded certificate.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
Reference Reference The external reference. Ensure that the asset data uses a media type of `application/pkcs1` or `application/pem` to correctly identify the type of encoded certificate. If the asset data includes a `ContentType` sub-key, set it to the corresponding media type. 4 subkeys | dictionary | required | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ DataURL DataURL The URL to retrieve data, which needs to start with `https://`. | string | required | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ ContentType ContentType The media type that describes the data. If present, the system checks the actual media type of the downloaded data, and an error occurs if the values don't match. | string | optional | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ Size Size The size of the data. Set the size to `0` if there's no expectation of a response body. If present, the system checks the actual size of the downloaded data, and an error occurs if the values don't match. | integer | optional | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ Hash-SHA-256 Hash-SHA-256 A SHA-256 hash of the data stored at the `DataURL`. Don't set this value if `Size` is `0` as the client ignores it. However, if present, the system checks the actual hash of the downloaded data, and an error occurs if the values don't match. | string | optional | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
Authentication Authentication The server authentication details. 1 subkey | dictionary | optional | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ Type Type The type of authentication, which has these allowed values:
- `MDM`: A request that uses MDM semantics, which includes the device-identity certificate, and any user authentication. This is equivalent to an MDM request made to the `CheckInURL` or `ServerURL`. This option is only available through declarative device management.
- `None`: A standard GET request. | string | required | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
