Device management payload list for iPhone and iPad devices
Payload settings for iPhone and iPad devices are detailed in the table below, which contains the following columns. Before you review the table below, understand what each column contains.
Note: For devices with iOS and iPadOS, if payloads have the same account description (or display name), they’re treated as exclusive payloads.
Supported payload name and identifiers: This column notes the name of the payload and the identifiers. If you’re using a device management service, the payload name may be different, but the identifiers are the same.
Supported enrollment methods: User Enrollment, Device Enrollment, and Automated Device Enrollment. For more information, see Enrollment methods for Apple devices.
Duplicates allowed: This column notes whether one specified payload (False) or more than one specified payload (True) can be delivered to a user or device. For example, you can add more than one Subscribed Calendars payload to a single configuration profile. This allows you to subscribe the user to, in this case, more than one calendar.
Note: Not all payloads and their respective settings are available in all device management services. To learn which configurations and payloads are available for your devices, consult your developer’s device management service documentation.
Payload and identifiers | Supported enrollment method | Duplicates allowed | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
com.apple.airplay | User Device Automated Device | True | |||||||||
com.apple.airprint | User Device Automated Device | True | |||||||||
com.apple.app.lock | Automated Device | False | |||||||||
com.apple.vpn.managed.applayer | User Device Automated Device | False | |||||||||
Automated Certificate Management Environment (ACME) com.apple.security.acme | User Device Automated Device | True | |||||||||
com.apple.caldav.account | User Device Automated Device | True | |||||||||
com.apple.cellular | Device Automated Device | False | |||||||||
com.apple.cellularprivatenetwork.managed | User Device Automated Device | False | |||||||||
com.apple.security.certificaterevocation | User Device | True | |||||||||
com.apple.security.certificatetransparency | User Device Automated Device | True | |||||||||
com.apple.security.pem com.apple.security.pkcs1 com.apple.security.pkcs12 com.apple.security.root | User Device Automated Device | True | |||||||||
com.apple.carddav.account | User Device Automated Device | True | |||||||||
com.apple.dnsProxy.managed Requires a device management service to install. | Automated Device | False | |||||||||
com.apple.dnsSettings.managed | Device Automated Device | True | |||||||||
com.apple.domains | Device Automated Device | False | |||||||||
com.apple.globalethernet.managed com.apple.firstactiveethernet.managed com.apple.firstethernet.managed com.apple.secondactiveethernet.managed com.apple.secondethernet.managed com.apple.thirdactiveethernet.managed com.apple.thirdethernet.managed | User Device Automated Device | False | |||||||||
com.apple.eas.account | User Device Automated Device | True | |||||||||
com.apple.extensiblesso Requires a device management service to install. | User Device Automated Device | True | |||||||||
Extensible Single Sign-On Kerberos com.apple.extensiblesso(kerberos) Requires a device management service to install. | User Device Automated Device | True | |||||||||
com.apple.font | User Device Automated Device | True | |||||||||
com.apple.proxy.http.global | Automated Device | False | |||||||||
com.apple.google-oauth | User Device | True | |||||||||
com.apple.homescreenlayout | Automated Device | False | |||||||||
com.apple.ldap.account | User Device Automated Device | True | |||||||||
com.apple.shareddeviceconfiguration | Automated Device | False | |||||||||
com.apple.mail.managed | User Device Automated Device | True | |||||||||
com.apple.networkusagerules Requires a device management service to install. | Automated Device | False | |||||||||
com.apple.notificationsettings | Device (macOS) Automated Device | True | |||||||||
com.apple.mobiledevice.passwordpolicy | User Device Automated Device | False | |||||||||
com.apple.relay.managed | Device Automated Device | True | |||||||||
com.apple.applicationaccess | User Device Automated Device | True | |||||||||
com.apple.security.scep | User Device Automated Device | True | |||||||||
com.apple.SetupAssistant.managed | User Device Automated Device | False | |||||||||
com.apple.sso | User Device Automated Device | False | |||||||||
com.apple.subscribedcalendar.account | User Device Automated Device | True | |||||||||
com.apple.tvremote | Automated Device | False | |||||||||
com.apple.vpn.managed | User (App-Layer VPN and App-to-App Layer VPN mapping only) Device Automated Device | True | |||||||||
com.apple.webClip.managed | User Device Automated Device | True | |||||||||
com.apple.webcontent-filter | Device Automated Device | True | |||||||||
com.apple.MCX(WiFi) com.apple.builtinwireless.managed com.apple.wifi.managed | User Device Automated Device | True | |||||||||