MDM

VPN variables MDM settings for Apple devices

You can use variables for a VPN connection with SCEP on Mac computers enrolled in a mobile device management (MDM) solution. You can use the following variables in the Simple Certificate Enrollment Protocol (SCEP) AuthName and XAuthName fields. These variables are resolved on the device during installation. You can combine these variables with static text, such as Mac.%HardwareUUID%, to create a compound name.

Consult your MDM vendor’s documentation to learn which variables they support.

Variable	Substitution
%AD_ComputerID%	The Active Directory computer ID.
%AD_Domain%	The Active Directory domain.
%AD_DomainForestName%	The Active Directory forest name.
%AD_DomainGuid%	The Active Directory GUID.
%AD_DomainNameDNS%	The Active Directory DNS Name.
%AD_KerberosID%	The Active Directory Kerberos ID.
%ComputerName%	The Mac computer’s name, as set in System Preferences > Sharing.
%HardwareUUID%	The Mac computer’s unique identifier.
%HostName%	The Mac computer’s DNS name, such as mac1.example.com.
%LocalHostName%	The Mac computer’s local network name, such as Mac1.local.
%MACAddress%	The Mac computer’s Ethernet (en0) MAC address.
%SerialNumber%	The Mac computer’s serial number.

Helpful?

Mobile Device Management Settings

VPN variables MDM settings for Apple devices