Variables settings for MDM payloads for Apple devices

You can use variables for a VPN connection with SCEP on Mac computers enrolled in a mobile device management (MDM) solution. You can use the following variables in the Simple Certificate Enrollment Protocol (SCEP) AuthName and XAuthName fields. These variables are resolved on the device during installation. You can combine these variables with static text, such as Mac.%HardwareUUID%, to create a compound name.

You can use the variables and substitutions in the table below with the VPN payload.

Variable	Substitution
%AD_ComputerID%	The Active Directory computer ID.
%AD_Domain%	The Active Directory domain.
%AD_DomainForestName%	The Active Directory forest name.
%AD_DomainGuid%	The Active Directory GUID.
%AD_DomainNameDNS%	The Active Directory DNS Name.
%AD_KerberosID%	The Active Directory Kerberos ID.
%ComputerName%	The Mac computer’s name, as set in Sharing (in System Settings > General for macOS 13 or later, or in System Preferences for macOS 12.0.1 or earlier).
%HardwareUUID%	The Mac computer’s unique identifier.
%HostName%	The Mac computer’s DNS name, such as mac1.theacmeinc.com.
%LocalHostName%	The Mac computer’s local network name, such as Mac1.local.
%MACAddress%	The Mac computer’s Ethernet (en0) MAC address.
%SerialNumber%	The Mac computer’s serial number.

Helpful?

Apple Platform Deployment

Variables settings for MDM payloads for Apple devices