MDM

VPN variables

With macOS, you can use the following variables in the Simple Certificate Enrollment Protocol (SCEP) AuthName and XAuthName fields. These variables are resolved on the device during installation. You can combine these variables with static text, such as Mac.%HardwareUUID%, to create a compound name.

Consult your MDM solution’s documentation to learn which variables they support.

Variable	Substitution
%AD_ComputerID%	The Active Directory computer ID.
%AD_Domain%	The Active Directory domain.
%AD_DomainForestName%	The Active Directory forest name.
%AD_DomainGuid%	The Active Directory GUID.
%AD_DomainNameDNS%	The Active Directory DNS Name.
%AD_KerberosID%	The Active Directory Kerberos ID.
%ComputerName%	The Mac computer’s name, as set in System Preferences > Sharing.
%HardwareUUID%	The Mac computer’s unique identifier.
%HostName%	The Mac computer’s DNS name, such as mac1.example.com.
%LocalHostName%	The Mac computer’s local network name, such as Mac1.local.
%MACAddress%	The Mac computer’s Ethernet (en0) MAC address.
%SerialNumber%	The Mac computer’s serial number.

Helpful?

Mobile Device Management Settings

VPN variables