A reference to arbitrary data with a specific media type.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
Reference Reference The external reference. 4 subkeys | dictionary | required | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ DataURL DataURL The URL to retrieve data, which needs to start with `https://`. | string | required | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ ContentType ContentType The media type that describes the data. If present, the system checks the actual media type of the downloaded data, and an error occurs if the values don't match. | string | optional | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ Size Size The size of the data. Set the size to `0` if there's no expectation of a response body. If present, the system checks the actual size of the downloaded data, and an error occurs if the values don't match. | integer | optional | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ Hash-SHA-256 Hash-SHA-256 A SHA-256 hash of the data stored at the `DataURL`. Don't set this value if `Size` is `0` as the client ignores it. However, if present, the system checks the actual hash of the downloaded data, and an error occurs if the values don't match. | string | optional | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
Authentication Authentication The server authentication details. 1 subkey | dictionary | optional | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ Type Type The type of authentication, which has these allowed values:
- `MDM`: A request that uses MDM semantics, which includes the device-identity certificate, and any user authentication. This is equivalent to an MDM request made to the `CheckInURL` or `ServerURL`. This option is only available through declarative device management.
- `None`: A standard GET request. | string | required | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.
com.apple.wifi.managed – Wi-Fi network configurationcom.apple.vpn.managed – VPN configurationcom.apple.applicationaccess – App and feature restrictionscom.apple.security.pkcs1 – Certificate (PKCS#1) payloadcom.apple.security.pkcs12 – Identity certificate (PKCS#12) payloadcom.apple.security.scep – SCEP certificate enrolmentcom.apple.mail.managed – Mail account configurationcom.apple.eas.account – Exchange ActiveSync accountcom.apple.MCX – Managed Client (macOS) preferencescom.apple.MCX.FileVault2 – FileVault 2 disk encryptioncom.apple.dock – macOS Dock configurationcom.apple.screensaver – Screensaver configurationcom.apple.loginwindow – macOS login window configurationcom.apple.systempolicy.managed – Gatekeeper / system policycom.apple.systempreferences – System Preferences pane restrictionscom.apple.SoftwareUpdate – Software update behaviourcom.apple.TCC.configuration-profile-policy – Privacy Preferences Policy Control (PPPC)com.apple.notificationsettings – Per-app notification settingscom.apple.webcontent-filter – Web content filtercom.apple.dnsSettings.managed – DNS settings (DoH / DoT)com.apple.relay.managed – Network relay configurationcom.apple.extensiblesso – Extensible Single Sign-Oncom.apple.configuration.passcode.settings – DDM: passcode policycom.apple.configuration.softwareupdate.enforcement.specific – DDM: enforced software updatecom.apple.configuration.services.configuration-files – DDM: service configuration filescom.apple.configuration.management.status-subscriptions – DDM: status subscriptionscom.apple.activation.simple – DDM: simple activation predicatecom.apple.management.organization-info – DDM: organization information