Certificate Preference MDM payload settings for Apple devices
You can configure Certificate Preference settings for users of a Mac enrolled in a mobile device management (MDM) solution. Use the Certificates payload to add certificates and an identity to the device.
The Certificate Preference payload supports the following. For more information, see Payload information.
Supported payload identifier: com.apple.security.certificatepreference
Supported operating systems and channels: macOS user.
Supported enrollment methods: User Enrollment, Device Enrollment.
Duplicates allowed: True—more than one Certificates Preference payload can be delivered to a user.
You can use the settings in the table below with the Certificates Preference payload.
Setting | Description | Required | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
Certificate name | The display name for the certificate. | Yes | |||||||||
Certificate UUID | The UUID of the Certificates payload within the same configuration profile. | Yes | |||||||||
Note: Each MDM vendor implements these settings differently. To learn how various Certificate Preference settings are applied to your devices, consult your MDM vendor’s documentation.