Variables settings for MDM payloads for Apple devices

You can use variables for a VPN connection that uses Simple Certificate Enrollment Protocol (SCEP) on Mac computers enrolled in a mobile device management (MDM) solution. You can also use variables for the AuthName and XAuthName fields. These variables are resolved on the device during MDM enrollment. You can then combine these variables with static text, such as Mac.%HardwareUUID%, to create a compound name.

You can use the variables and substitutions in the table below with the VPN payload.

Variable	Substitution
%AD_ComputerID%	The Active Directory computer ID.
%AD_Domain%	The Active Directory domain.
%AD_DomainForestName%	The Active Directory forest name.
%AD_DomainGuid%	The Active Directory GUID.
%AD_DomainNameDNS%	The Active Directory DNS Name.
%AD_KerberosID%	The Active Directory Kerberos ID.
%ComputerName%	The Mac computer’s name, as set in Sharing (in System Settings > General for macOS 13 or later, or in System Preferences for macOS 12.0.1 or earlier).
%HardwareUUID%	The Mac computer’s unique identifier.
%HostName%	The Mac computer’s DNS name, such as mac1.betterbag.com.
%LocalHostName%	The Mac computer’s local network name, such as Mac1.local.
%MACAddress%	The Mac computer’s Ethernet (en0) MAC address.
%SerialNumber%	The Mac computer’s serial number.

Helpful?

Apple Platform Deployment

Variables settings for MDM payloads for Apple devices