Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Use the interactive explorer to search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.
A reference to arbitrary data with a specific media type.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
Reference Reference The external reference. 4 subkeys | dictionary | required | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ DataURL DataURL The URL to retrieve data, which needs to start with `https://`. | string | required | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ ContentType ContentType The media type that describes the data. If present, the system checks the actual media type of the downloaded data, and an error occurs if the values don't match. | string | optional | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ Size Size The size of the data. Set the size to `0` if there's no expectation of a response body. If present, the system checks the actual size of the downloaded data, and an error occurs if the values don't match. | integer | optional | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ Hash-SHA-256 Hash-SHA-256 A SHA-256 hash of the data stored at the `DataURL`. Don't set this value if `Size` is `0` as the client ignores it. However, if present, the system checks the actual hash of the downloaded data, and an error occurs if the values don't match. | string | optional | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
Authentication Authentication The server authentication details. 1 subkey | dictionary | optional | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
└─ Type Type The type of authentication, which has these allowed values:
- `MDM`: A request that uses MDM semantics, which includes the device-identity certificate, and any user authentication. This is equivalent to an MDM request made to the `CheckInURL` or `ServerURL`. This option is only available through declarative device management.
- `None`: A standard GET request. | string | required | — | ✓Yes | iOS (17.0+)macOS (14.0+)tvOS (17.0+)visionOS (1.1+)watchOS (10.0+) |
