A reference to a SCEP identity.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
Reference Reference The external reference. Ensure that the asset data:
- Is a JSON document that represents the `com.apple.credential.scep` credential type
- Uses a media type of `application/json`, and if it includes a `ContentType` sub-key, that sub-key media type is also `application/json` 4 subkeys | dictionary | required | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ DataURL DataURL The URL to retrieve data, which needs to start with `https://`. | string | required | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ ContentType ContentType The media type that describes the data. If present, the system checks the actual media type of the downloaded data, and an error occurs if the values don't match. | string | optional | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ Size Size The size of the data. Set the size to `0` if there's no expectation of a response body. If present, the system checks the actual size of the downloaded data, and an error occurs if the values don't match. | integer | optional | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ Hash-SHA-256 Hash-SHA-256 A SHA-256 hash of the data stored at the `DataURL`. Don't set this value if `Size` is `0` as the client ignores it. However, if present, the system checks the actual hash of the downloaded data, and an error occurs if the values don't match. | string | optional | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
Authentication Authentication The server authentication details. 1 subkey | dictionary | optional | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ Type Type The type of authentication, which has these allowed values:
- `MDM`: A request that uses MDM semantics, which includes the device-identity certificate, and any user authentication. This is equivalent to an MDM request made to the `CheckInURL` or `ServerURL`. This option is only available through declarative device management.
- `None`: A standard GET request. | string | required | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
Accessible Accessible The keychain accessibility that determines when the keychain item is available for use, which has these allowed values:
- `Default`: The most restrictive accessibility that still satisfies all uses of the asset by configurations that reference it.
- `AfterFirstUnlock`: The keychain item is only available after the first unlock of the device. | string | optional | Default | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
