diff --git a/CHANGES.md b/CHANGES.md index 703d295..d700a32 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -8,6 +8,7 @@ Significant changes in this release. ### New Objects +- New: declarative/declarations/configurations/accessibility.settings.yaml - New: declarative/declarations/configurations/app.settings.yaml - New: declarative/declarations/configurations/content-cache.settings.yaml - New: declarative/declarations/configurations/extensible-sso.yaml @@ -22,11 +23,14 @@ Significant changes in this release. ### New Payload Keys +- New: declarative/declarations/configurations/intelligence.settings.yaml/AllowVisualIntelligence - New: declarative/declarations/configurations/intelligence.settings.yaml/Apps/Calendar - New: declarative/declarations/configurations/legacy.interactive.yaml/ProfileAssetReference - New: declarative/declarations/configurations/legacy.yaml/ProfileAssetReference - New: declarative/declarations/configurations/package.yaml/UninstallBehavior - New: declarative/declarations/configurations/safari.settings.yaml/Privacy +- New: declarative/declarations/configurations/siri.settings.yaml/AllowSiriAI +- New: declarative/declarations/configurations/siri.settings.yaml/ForceReduceSensitiveContent ### Objects with New OS Support @@ -38,6 +42,10 @@ Significant changes in this release. - Changed: declarative/declarations/configurations/app.managed.yaml/ExtensionConfigs [macOS 27.0] - Changed: declarative/declarations/configurations/app.managed.yaml/LegacyAppConfigAssetReference [macOS 27.0] +### Removed Payload Keys + +- Removed: declarative/declarations/configurations/app.managed.yaml/VPPType + --- ## declarative/status @@ -107,10 +115,11 @@ Significant changes in this release. ### New Payload Keys -- New: mdm/profiles/com.apple.applicationaccess.yaml/ForceCaptivePortalConnectionFromLockScreen -- New: mdm/profiles/com.apple.applicationaccess.yaml/ForceWifiConfigurationOnLockScreen +- New: mdm/profiles/com.apple.applicationaccess.yaml/allowSiriAI - New: mdm/profiles/com.apple.extensiblesso.yaml/PlatformSSO/AllowWebLoginPasswordSync - New: mdm/profiles/com.apple.extensiblesso.yaml/PlatformSSO/WebLoginURLAllowList +- New: mdm/profiles/com.apple.loginwindow.yaml/ForceCaptivePortalConnectionFromLockScreen +- New: mdm/profiles/com.apple.loginwindow.yaml/ForceWifiConfigurationOnLockScreen ### Payload Keys with New OS Support @@ -134,6 +143,11 @@ Significant changes in this release. - Removed: mdm/profiles/com.apple.applicationaccess.yaml/forceDelayedAppSoftwareUpdates - Removed: mdm/profiles/com.apple.applicationaccess.yaml/forceDelayedMajorSoftwareUpdates - Removed: mdm/profiles/com.apple.applicationaccess.yaml/forceDelayedSoftwareUpdates +- Removed: mdm/profiles/com.apple.system.logging.yaml/Processes + +### Renamed Objects + +- Renamed: mdm/profiles/com.apple.MCX(Mobililty).yaml -> mdm/profiles/com.apple.MCX(Mobility).yaml --- @@ -148,4 +162,13 @@ No changes. ### New Payload Keys - New: other/skipkeys.yaml/AccessibilityAppearance +- New: other/skipkeys.yaml/DeviceFeaturesTour - New: other/skipkeys.yaml/LiquidGlass + +--- + +## openapi + +### New Objects + +- New: openapi/content-cache/metrics_report.json diff --git a/declarative/declarations/assets/credential.certificate.yaml b/declarative/declarations/assets/credential.certificate.yaml index 4ca24c0..8438c51 100644 --- a/declarative/declarations/assets/credential.certificate.yaml +++ b/declarative/declarations/assets/credential.certificate.yaml @@ -1,5 +1,5 @@ title: Asset:Credential Certificate -description: 'A reference to a PKCS #1 or PEM encoded certificate.' +description: 'A reference to one PKCS #1 or PEM encoded certificate.' payload: declarationtype: com.apple.asset.credential.certificate supportedOS: @@ -21,10 +21,12 @@ payloadkeys: - application/pkcs1 - application/pem presence: required - content: The external reference. Ensure that the asset data uses a media type of - `application/pkcs1` or `application/pem` to correctly identify the type of encoded - certificate. If the asset data includes a `ContentType` sub-key, set it to the - corresponding media type. + content: The external reference. Ensure the asset data contains exactly one certificate. + If the PEM data contains more than one certificate, the system installs the first + certificate and ignores the rest. Ensure that the asset data uses a media type + of `application/pkcs1` or `application/pem` to correctly identify the type of + encoded certificate. If the asset data includes a `ContentType` sub-key, set it + to the corresponding media type. subkeys: - key: DataURL title: Data URL diff --git a/declarative/declarations/configurations/extensible-sso.yaml b/declarative/declarations/configurations/extensible-sso.yaml index 7bf0e96..e9de655 100644 --- a/declarative/declarations/configurations/extensible-sso.yaml +++ b/declarative/declarations/configurations/extensible-sso.yaml @@ -426,15 +426,15 @@ payloadkeys: type: presence: optional content: |- - The policy to apply when using Platform SSO at FileVault unlock on a Mac with Apple silicon. Applies when `AuthenticationMethod` is `Password`. + The policy to apply when using Platform SSO at FileVault unlock on a Mac with Apple silicon. - * `AttemptAuthentication`: The device attempts Platform SSO authentication before proceeding. If offline, unlock continues if the local account password matches. If online and the credential is incorrect, then the device requires a successful Platform SSO authentication is required, even if taken offline. - * `RequireAuthentication`: The device requires Platform SSO authentication before proceeding. If the device is offline and `AllowOfflineGracePeriod` is enabled, then the device uses the offline `OfflineGracePeriod` to determine if the user can proceed or not. If online and the credential is incorrect, then the device requires a valid Platform SSO authentication to proceed, regardless of the `OfflineGracePeriod`. If the account isn't registered for Platform SSO and `AllowAuthenticationGracePeriod` is enabled, then the device uses `AuthenticationGracePeriod` to determine if the user can proceed or not. - * `AllowOfflineGracePeriod`: The device allows the use of the `OfflineGracePeriod` when `RequireAuthentication` is enabled. If `AllowOfflineGracePeriod` isn't set, then the device denies offline access. - * `AllowAuthenticationGracePeriod`: The device allows the use of the `AuthenticationGracePeriod` for other local accounts when `RequireAuthentication` is enabled. The `AuthenticationGracePeriod` starts when any of the policies are updated. If `AllowAuthenticationGracePeriod` isn't set, then the device denies unregistered account access. - * `RequireTouchID`: The device requires the use of Touch ID (and not Apple Watch) for File Vault unlock. - * `RequireTouchIDOrWatch`: The device requires the use of Touch ID or Apple Watch for File Vault unlock. - * `AllowOpenIDForTouchIDFallback`: The device allows web login as a fallback if touchID fails or isn't available. + * `AttemptAuthentication`: The device attempts Platform SSO authentication before proceeding. If offline, unlock continues if the local account password matches. If online and the credential is incorrect, then the device requires a successful Platform SSO authentication is required, even if taken offline. Only use when `AuthenticationMethod` is `Password`. + * `RequireAuthentication`: The device requires Platform SSO authentication before proceeding. If the device is offline and `AllowOfflineGracePeriod` is enabled, then the device uses the offline `OfflineGracePeriod` to determine if the user can proceed or not. If online and the credential is incorrect, then the device requires a valid Platform SSO authentication to proceed, regardless of the `OfflineGracePeriod`. If the account isn't registered for Platform SSO and `AllowAuthenticationGracePeriod` is enabled, then the device uses `AuthenticationGracePeriod` to determine if the user can proceed or not. Only use when `AuthenticationMethod` is `Password`. + * `AllowOfflineGracePeriod`: The device allows the use of the `OfflineGracePeriod`. If `AllowOfflineGracePeriod` isn't set, then the device denies offline access. Only use when `AuthenticationMethod` is `Password` and `RequireAuthentication` is enabled, or `AuthenticationMethod` is `OpenID`. + * `AllowAuthenticationGracePeriod`: The device allows the use of the `AuthenticationGracePeriod` for other local accounts when `RequireAuthentication` is enabled. The `AuthenticationGracePeriod` starts when any of the policies are updated. If `AllowAuthenticationGracePeriod` isn't set, then the device denies unregistered account access. Only use when `AuthenticationMethod` is `Password`. + * `RequireTouchID`: The device requires the use of Touch ID (and not Apple Watch) for FileVault unlock. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. + * `RequireTouchIDOrWatch`: The device requires the use of Touch ID or Apple Watch for FileVault unlock. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. + * `AllowOpenIDForTouchIDFallback`: The device allows web login as a fallback if Touch ID fails or isn't available. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. subkeys: - key: policy type: @@ -453,15 +453,15 @@ payloadkeys: type: presence: optional content: |- - The policy to apply when using Platform SSO at the Login Window. Applies when `AuthenticationMethod` is `Password`. + The policy to apply when using Platform SSO at the Login Window. - * `AttemptAuthentication`: The device attempts Platform SSO authentication before proceeding. If offline, login continues if the local account password matches. If online and the credential is incorrect, then the device requires a successful Platform SSO authentication to proceed, even if taken offline. - * `RequireAuthentication`: The device requires Platform SSO authentication before proceeding. If the device is offline and `AllowOfflineGracePeriod` is enabled, then the device uses the offline `OfflineGracePeriod` to determine if the user can proceed or not. If online and the credential is incorrect, then the device requires a valid Platform SSO authentication to proceed, regardless of the `OfflineGracePeriod`. If the account isn't registered for Platform SSO and `AllowAuthenticationGracePeriod` is enabled, then the device uses the `AuthenticationGracePeriod` to determine if the user can proceed or not. - * `AllowOfflineGracePeriod`: The device allows the use of the `OfflineGracePeriod` when `RequireAuthentication` is enabled. If `AllowOfflineGracePeriod` isn't set, then the device denies offline access. Applies to web login and all offline passwords. - * `AllowAuthenticationGracePeriod`: The device allows the use of the `AuthenticationGracePeriod` for other local accounts when `RequireAuthentication` is enabled. The `AuthenticationGracePeriod` starts when any of the policies have been updated. If `AllowAuthenticationGracePeriod` isn't set, then the device denies unregistered account access. - * `RequireTouchID`: The device requires the use of Touch ID (and not Apple Watch) for login. - * `RequireTouchIDOrWatch`: The device requires the use of Touch ID or Apple Watch for login. - * `AllowOpenIDForTouchIDFallback`: The device allows web login as fallback if touchID fails or isn't available. + * `AttemptAuthentication`: The device attempts Platform SSO authentication before proceeding. If offline, login continues if the local account password matches. If online and the credential is incorrect, then the device requires a successful Platform SSO authentication to proceed, even if taken offline. Only use when `AuthenticationMethod` is `Password`. + * `RequireAuthentication`: The device requires Platform SSO authentication before proceeding. If the device is offline and `AllowOfflineGracePeriod` is enabled, then the device uses the offline `OfflineGracePeriod` to determine if the user can proceed or not. If online and the credential is incorrect, then the device requires a valid Platform SSO authentication to proceed, regardless of the `OfflineGracePeriod`. If the account isn't registered for Platform SSO and `AllowAuthenticationGracePeriod` is enabled, then the device uses the `AuthenticationGracePeriod` to determine if the user can proceed or not. Only use when `AuthenticationMethod` is `Password`. + * `AllowOfflineGracePeriod`: The device allows the use of the `OfflineGracePeriod`. If `AllowOfflineGracePeriod` isn't set, then the device denies offline access. Only use when `AuthenticationMethod` is `Password` and `RequireAuthentication` is enabled, or `AuthenticationMethod` is `OpenID`. + * `AllowAuthenticationGracePeriod`: The device allows the use of the `AuthenticationGracePeriod` for other local accounts when `RequireAuthentication` is enabled. The `AuthenticationGracePeriod` starts when any of the policies have been updated. If `AllowAuthenticationGracePeriod` isn't set, then the device denies unregistered account access. Only use when `AuthenticationMethod` is `Password`. + * `RequireTouchID`: The device requires the use of Touch ID (and not Apple Watch) for login. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. + * `RequireTouchIDOrWatch`: The device requires the use of Touch ID or Apple Watch for login. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. + * `AllowOpenIDForTouchIDFallback`: The device allows web login as fallback if Touch ID fails or isn't available. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. subkeys: - key: policy type: @@ -480,16 +480,16 @@ payloadkeys: type: presence: optional content: |- - The policy to apply when using Platform SSO at screensaver unlock. Applies when `AuthenticationMethod` is `Password`. later. + The policy to apply when using Platform SSO at screensaver unlock. - * `AttemptAuthentication`: The device attempts Platform SSO authentication before proceeding. If offline, unlock will continue if the local account password matches. If online and the credential is incorrect, then the device requires a successful Platform SSO authentication to proceed, even if taken offline. - * `RequireAuthentication`: The device requires Platform SSO authentication before proceeding. If the device is offline and `AllowOfflineGracePeriod` is enabled, then the offline `OfflineGracePeriod` is used to determine if the user can proceed or not. If online and the credential is incorrect, then the device requires a valid Platform SSO authentication to proceed regardless of the `OfflineGracePeriod`. If the account isn't registered for Platform SSO and `AllowAuthenticationGracePeriod` is enabled, then the device uses `AuthenticationGracePeriod` to determine if the user can proceed or not. - * `AllowOfflineGracePeriod`: The device allows the use of the `OfflineGracePeriod` when `RequireAuthentication` is enabled. If `AllowOfflineGracePeriod` isn't set, then the device denies offline access. - * `AllowAuthenticationGracePeriod`: The device allows the use of the `AuthenticationGracePeriod` for other local accounts when `RequireAuthentication` is enabled. The `AuthenticationGracePeriod` starts when any of the policies have been updated. If `AllowAuthenticationGracePeriod` isn't set, then the device denies the unregistered account access. - * `AllowTouchIDOrWatchForUnlock`: The device allows TouchID or Watch to unlock the screensaver instead of Platform SSO authentication when `RequireAuthentication` is enabled. - * `RequireTouchID`: The device requires the use of Touch ID (and not Apple Watch) for unlock. - * `RequireTouchIDOrWatch`: RThe device requires the use of Touch ID or Apple Watch for unlock. - * `AllowOpenIDForTouchIDFallback`: The device allows web login as fallback if touchID fails or isn't available. + * `AttemptAuthentication`: The device attempts Platform SSO authentication before proceeding. If offline, unlock will continue if the local account password matches. If online and the credential is incorrect, then the device requires a successful Platform SSO authentication to proceed, even if taken offline. Only use when `AuthenticationMethod` is `Password`. + * `RequireAuthentication`: The device requires Platform SSO authentication before proceeding. If the device is offline and `AllowOfflineGracePeriod` is enabled, then the offline `OfflineGracePeriod` is used to determine if the user can proceed or not. If online and the credential is incorrect, then the device requires a valid Platform SSO authentication to proceed regardless of the `OfflineGracePeriod`. If the account isn't registered for Platform SSO and `AllowAuthenticationGracePeriod` is enabled, then the device uses `AuthenticationGracePeriod` to determine if the user can proceed or not. Only use when `AuthenticationMethod` is `Password`. + * `AllowOfflineGracePeriod`: The device allows the use of the `OfflineGracePeriod`. If `AllowOfflineGracePeriod` isn't set, then the device denies offline access. Only use when `AuthenticationMethod` is `Password` and `RequireAuthentication` is enabled, or `AuthenticationMethod` is `OpenID`. + * `AllowAuthenticationGracePeriod`: The device allows the use of the `AuthenticationGracePeriod` for other local accounts when `RequireAuthentication` is enabled. The `AuthenticationGracePeriod` starts when any of the policies have been updated. If `AllowAuthenticationGracePeriod` isn't set, then the device denies the unregistered account access. Only use when `AuthenticationMethod` is `Password`. + * `AllowTouchIDOrWatchForUnlock`: The device allows Touch ID or Apple Watch to unlock the screensaver instead of Platform SSO authentication when `RequireAuthentication` is enabled. Only use when `AuthenticationMethod` is `Password`. + * `RequireTouchID`: The device requires the use of Touch ID (and not Apple Watch) for unlock. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. + * `RequireTouchIDOrWatch`: The device requires the use of Touch ID or Apple Watch for unlock. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. + * `AllowOpenIDForTouchIDFallback`: The device allows web login as fallback if Touch ID fails or isn't available. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. subkeys: - key: policy type: @@ -508,13 +508,14 @@ payloadkeys: title: Offline grace period type: presence: optional - content: The amount of time after the last successful Platform SSO login for - using a local account password offline. Required when setting `AllowOfflineGracePeriod`. + content: The amount of time (in seconds) after the last successful Platform + SSO login for using a local account password offline. Required when setting + `AllowOfflineGracePeriod`. - key: AuthenticationGracePeriod title: Authentication grace period type: presence: optional - content: The amount of time after receiving or updating a `Policies.FileVault`, + content: The amount of time (in seconds) after receiving or updating a `Policies.FileVault`, `Policies.Login`, or `Policies.Unlock` that the system can use unregistered local accounts. Required when `AllowAuthenticationGracePeriod` is set. - key: NonPlatformSSOAccounts diff --git a/declarative/declarations/configurations/siri.settings.yaml b/declarative/declarations/configurations/siri.settings.yaml index f27418c..a828f99 100644 --- a/declarative/declarations/configurations/siri.settings.yaml +++ b/declarative/declarations/configurations/siri.settings.yaml @@ -121,7 +121,7 @@ payloadkeys: tvOS: introduced: n/a visionOS: - introduced: n/a + introduced: '27.0' watchOS: introduced: n/a type: diff --git a/declarative/status/account.list.caldav.yaml b/declarative/status/account.list.caldav.yaml index d7f53e1..e6d786c 100644 --- a/declarative/status/account.list.caldav.yaml +++ b/declarative/status/account.list.caldav.yaml @@ -103,7 +103,7 @@ examples: files: - tab: New or updated account description: Reports a new or updated account. - file: data/docc-examples/remotemanagementmodel/status/account.list.caldav/example1.json + file: examples/declarative/status/account.list.caldav/example1.json - tab: Removed account description: Reports a removed account. - file: data/docc-examples/remotemanagementmodel/status/account.list.caldav/example2.json + file: examples/declarative/status/account.list.caldav/example2.json diff --git a/declarative/status/account.list.carddav.yaml b/declarative/status/account.list.carddav.yaml index 12dcad2..3d73e9a 100644 --- a/declarative/status/account.list.carddav.yaml +++ b/declarative/status/account.list.carddav.yaml @@ -92,7 +92,7 @@ examples: files: - tab: New or updated account description: Reports a new or updated account. - file: data/docc-examples/remotemanagementmodel/status/account.list.carddav/example1.json + file: examples/declarative/status/account.list.carddav/example1.json - tab: Removed account description: Reports a removed account. - file: data/docc-examples/remotemanagementmodel/status/account.list.carddav/example2.json + file: examples/declarative/status/account.list.carddav/example2.json diff --git a/declarative/status/account.list.exchange.yaml b/declarative/status/account.list.exchange.yaml index e6b860a..129e46b 100644 --- a/declarative/status/account.list.exchange.yaml +++ b/declarative/status/account.list.exchange.yaml @@ -122,7 +122,7 @@ examples: files: - tab: New or updated account description: Reports a new or updated account. - file: data/docc-examples/remotemanagementmodel/status/account.list.exchange/example1.json + file: examples/declarative/status/account.list.exchange/example1.json - tab: Removed account description: Reports a removed account. - file: data/docc-examples/remotemanagementmodel/status/account.list.exchange/example2.json + file: examples/declarative/status/account.list.exchange/example2.json diff --git a/declarative/status/account.list.google.yaml b/declarative/status/account.list.google.yaml index 6746182..9b737e8 100644 --- a/declarative/status/account.list.google.yaml +++ b/declarative/status/account.list.google.yaml @@ -106,7 +106,7 @@ examples: files: - tab: New or updated account description: Reports a new or updated account. - file: data/docc-examples/remotemanagementmodel/status/account.list.google/example1.json + file: examples/declarative/status/account.list.google/example1.json - tab: Removed account description: Reports a removed account. - file: data/docc-examples/remotemanagementmodel/status/account.list.google/example2.json + file: examples/declarative/status/account.list.google/example2.json diff --git a/declarative/status/account.list.ldap.yaml b/declarative/status/account.list.ldap.yaml index 93c242d..cb1c9b0 100644 --- a/declarative/status/account.list.ldap.yaml +++ b/declarative/status/account.list.ldap.yaml @@ -99,7 +99,7 @@ examples: files: - tab: New or updated account description: Reports a new or updated account. - file: data/docc-examples/remotemanagementmodel/status/account.list.ldap/example1.json + file: examples/declarative/status/account.list.ldap/example1.json - tab: Removed account description: Reports a removed account. - file: data/docc-examples/remotemanagementmodel/status/account.list.ldap/example2.json + file: examples/declarative/status/account.list.ldap/example2.json diff --git a/declarative/status/account.list.mail.incoming.yaml b/declarative/status/account.list.mail.incoming.yaml index f29be9a..ef9a04b 100644 --- a/declarative/status/account.list.mail.incoming.yaml +++ b/declarative/status/account.list.mail.incoming.yaml @@ -104,7 +104,7 @@ examples: files: - tab: New or updated account description: Reports a new or updated account. - file: data/docc-examples/remotemanagementmodel/status/account.list.mail.incoming/example1.json + file: examples/declarative/status/account.list.mail.incoming/example1.json - tab: Removed account description: Reports a removed account. - file: data/docc-examples/remotemanagementmodel/status/account.list.mail.incoming/example2.json + file: examples/declarative/status/account.list.mail.incoming/example2.json diff --git a/declarative/status/account.list.mail.outgoing.yaml b/declarative/status/account.list.mail.outgoing.yaml index 72a4ff1..2b7e8a1 100644 --- a/declarative/status/account.list.mail.outgoing.yaml +++ b/declarative/status/account.list.mail.outgoing.yaml @@ -92,7 +92,7 @@ examples: files: - tab: New or updated account description: Reports a new or updated account. - file: data/docc-examples/remotemanagementmodel/status/account.list.mail.outgoing/example1.json + file: examples/declarative/status/account.list.mail.outgoing/example1.json - tab: Removed account description: Reports a removed account. - file: data/docc-examples/remotemanagementmodel/status/account.list.mail.outgoing/example2.json + file: examples/declarative/status/account.list.mail.outgoing/example2.json diff --git a/declarative/status/account.list.subscribed-calendar.yaml b/declarative/status/account.list.subscribed-calendar.yaml index 734a7f6..2a576de 100644 --- a/declarative/status/account.list.subscribed-calendar.yaml +++ b/declarative/status/account.list.subscribed-calendar.yaml @@ -93,7 +93,7 @@ examples: files: - tab: New or updated account description: Reports a new or updated account. - file: data/docc-examples/remotemanagementmodel/status/account.list.subscribed-calendar/example1.json + file: examples/declarative/status/account.list.subscribed-calendar/example1.json - tab: Removed account description: Reports a removed account. - file: data/docc-examples/remotemanagementmodel/status/account.list.subscribed-calendar/example2.json + file: examples/declarative/status/account.list.subscribed-calendar/example2.json diff --git a/declarative/status/app.managed.list.yaml b/declarative/status/app.managed.list.yaml index ace428e..c1af24f 100644 --- a/declarative/status/app.managed.list.yaml +++ b/declarative/status/app.managed.list.yaml @@ -273,7 +273,7 @@ examples: files: - tab: New or updated app description: Reports a new or updated app. - file: data/docc-examples/remotemanagementmodel/status/app.managed.list/example1.json + file: examples/declarative/status/app.managed.list/example1.json - tab: Removed app description: Reports a removed app. - file: data/docc-examples/remotemanagementmodel/status/app.managed.list/example2.json + file: examples/declarative/status/app.managed.list/example2.json diff --git a/declarative/status/content-cache.info.yaml b/declarative/status/content-cache.info.yaml index ff0a736..7b30a1b 100644 --- a/declarative/status/content-cache.info.yaml +++ b/declarative/status/content-cache.info.yaml @@ -97,4 +97,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/content-cache.info/example1.json + - file: examples/declarative/status/content-cache.info/example1.json diff --git a/declarative/status/content-cache.parents.yaml b/declarative/status/content-cache.parents.yaml index 8aca5fb..417e3dc 100644 --- a/declarative/status/content-cache.parents.yaml +++ b/declarative/status/content-cache.parents.yaml @@ -70,7 +70,7 @@ examples: files: - tab: New or updated parent description: Reports a new or updated parent. - file: data/docc-examples/remotemanagementmodel/status/content-cache.parents/example1.json + file: examples/declarative/status/content-cache.parents/example1.json - tab: Removed parent description: Reports a removed parent. - file: data/docc-examples/remotemanagementmodel/status/content-cache.parents/example2.json + file: examples/declarative/status/content-cache.parents/example2.json diff --git a/declarative/status/content-cache.peers.yaml b/declarative/status/content-cache.peers.yaml index 5f89cf2..f6c24e3 100644 --- a/declarative/status/content-cache.peers.yaml +++ b/declarative/status/content-cache.peers.yaml @@ -76,7 +76,7 @@ examples: files: - tab: New or updated peer description: Reports a new or updated peer. - file: data/docc-examples/remotemanagementmodel/status/content-cache.peers/example1.json + file: examples/declarative/status/content-cache.peers/example1.json - tab: Removed peer description: Reports a removed peer. - file: data/docc-examples/remotemanagementmodel/status/content-cache.peers/example2.json + file: examples/declarative/status/content-cache.peers/example2.json diff --git a/declarative/status/content-cache.status.yaml b/declarative/status/content-cache.status.yaml index b096bf9..9dd615e 100644 --- a/declarative/status/content-cache.status.yaml +++ b/declarative/status/content-cache.status.yaml @@ -156,4 +156,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/content-cache.status/example1.json + - file: examples/declarative/status/content-cache.status/example1.json diff --git a/declarative/status/device.identifier.serial-number.yaml b/declarative/status/device.identifier.serial-number.yaml index 52b6228..c4ae892 100644 --- a/declarative/status/device.identifier.serial-number.yaml +++ b/declarative/status/device.identifier.serial-number.yaml @@ -55,4 +55,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/device.identifier.serial-number/example1.json + - file: examples/declarative/status/device.identifier.serial-number/example1.json diff --git a/declarative/status/device.identifier.udid.yaml b/declarative/status/device.identifier.udid.yaml index e986b33..7280679 100644 --- a/declarative/status/device.identifier.udid.yaml +++ b/declarative/status/device.identifier.udid.yaml @@ -57,4 +57,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/device.identifier.udid/example1.json + - file: examples/declarative/status/device.identifier.udid/example1.json diff --git a/declarative/status/device.model.family.yaml b/declarative/status/device.model.family.yaml index 345184c..3bcad90 100644 --- a/declarative/status/device.model.family.yaml +++ b/declarative/status/device.model.family.yaml @@ -58,4 +58,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/device.model.family/example1.json + - file: examples/declarative/status/device.model.family/example1.json diff --git a/declarative/status/device.model.identifier.yaml b/declarative/status/device.model.identifier.yaml index fa806f8..10d690e 100644 --- a/declarative/status/device.model.identifier.yaml +++ b/declarative/status/device.model.identifier.yaml @@ -62,4 +62,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/device.model.identifier/example1.json + - file: examples/declarative/status/device.model.identifier/example1.json diff --git a/declarative/status/device.model.marketing-name.yaml b/declarative/status/device.model.marketing-name.yaml index a50775b..915fcd8 100644 --- a/declarative/status/device.model.marketing-name.yaml +++ b/declarative/status/device.model.marketing-name.yaml @@ -59,4 +59,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/device.model.marketing-name/example1.json + - file: examples/declarative/status/device.model.marketing-name/example1.json diff --git a/declarative/status/device.model.number.yaml b/declarative/status/device.model.number.yaml index 58982f8..3470164 100644 --- a/declarative/status/device.model.number.yaml +++ b/declarative/status/device.model.number.yaml @@ -58,4 +58,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/device.model.number/example1.json + - file: examples/declarative/status/device.model.number/example1.json diff --git a/declarative/status/device.operating-system.build-version.yaml b/declarative/status/device.operating-system.build-version.yaml index f27d6fd..d458a3d 100644 --- a/declarative/status/device.operating-system.build-version.yaml +++ b/declarative/status/device.operating-system.build-version.yaml @@ -58,4 +58,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/device.operating-system.build-version/example1.json + - file: examples/declarative/status/device.operating-system.build-version/example1.json diff --git a/declarative/status/device.operating-system.family.yaml b/declarative/status/device.operating-system.family.yaml index 3623d9d..f91dc83 100644 --- a/declarative/status/device.operating-system.family.yaml +++ b/declarative/status/device.operating-system.family.yaml @@ -58,4 +58,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/device.operating-system.family/example1.json + - file: examples/declarative/status/device.operating-system.family/example1.json diff --git a/declarative/status/device.operating-system.marketing-name.yaml b/declarative/status/device.operating-system.marketing-name.yaml index 4fefa0a..628266d 100644 --- a/declarative/status/device.operating-system.marketing-name.yaml +++ b/declarative/status/device.operating-system.marketing-name.yaml @@ -59,4 +59,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/device.operating-system.marketing-name/example1.json + - file: examples/declarative/status/device.operating-system.marketing-name/example1.json diff --git a/declarative/status/device.operating-system.supplemental.build-version.yaml b/declarative/status/device.operating-system.supplemental.build-version.yaml index dcbcc50..3f3d07a 100644 --- a/declarative/status/device.operating-system.supplemental.build-version.yaml +++ b/declarative/status/device.operating-system.supplemental.build-version.yaml @@ -60,4 +60,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/device.operating-system.supplemental.build-version/example1.json + - file: examples/declarative/status/device.operating-system.supplemental.build-version/example1.json diff --git a/declarative/status/device.operating-system.supplemental.extra-version.yaml b/declarative/status/device.operating-system.supplemental.extra-version.yaml index b4553f2..0a0f9fe 100644 --- a/declarative/status/device.operating-system.supplemental.extra-version.yaml +++ b/declarative/status/device.operating-system.supplemental.extra-version.yaml @@ -60,4 +60,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/device.operating-system.supplemental.extra-version/example1.json + - file: examples/declarative/status/device.operating-system.supplemental.extra-version/example1.json diff --git a/declarative/status/device.operating-system.version.yaml b/declarative/status/device.operating-system.version.yaml index 20bf75b..0e43cb9 100644 --- a/declarative/status/device.operating-system.version.yaml +++ b/declarative/status/device.operating-system.version.yaml @@ -58,4 +58,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/device.operating-system.version/example1.json + - file: examples/declarative/status/device.operating-system.version/example1.json diff --git a/declarative/status/device.power.battery-health.yaml b/declarative/status/device.power.battery-health.yaml index f193cd5..f186944 100644 --- a/declarative/status/device.power.battery-health.yaml +++ b/declarative/status/device.power.battery-health.yaml @@ -59,4 +59,4 @@ notes: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/device.power.battery-health/example1.json + - file: examples/declarative/status/device.power.battery-health/example1.json diff --git a/declarative/status/device.system.health.yaml b/declarative/status/device.system.health.yaml index b904f1f..8f01fe5 100644 --- a/declarative/status/device.system.health.yaml +++ b/declarative/status/device.system.health.yaml @@ -125,4 +125,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/device.system.health/example1.json + - file: examples/declarative/status/device.system.health/example1.json diff --git a/declarative/status/diskmanagement.filevault.enabled.yaml b/declarative/status/diskmanagement.filevault.enabled.yaml index e70cb97..e7a3eac 100644 --- a/declarative/status/diskmanagement.filevault.enabled.yaml +++ b/declarative/status/diskmanagement.filevault.enabled.yaml @@ -27,4 +27,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/diskmanagement.filevault.enabled/example1.json + - file: examples/declarative/status/diskmanagement.filevault.enabled/example1.json diff --git a/declarative/status/enhanced-logging.applecare-token.yaml b/declarative/status/enhanced-logging.applecare-token.yaml index b31072a..034fd30 100644 --- a/declarative/status/enhanced-logging.applecare-token.yaml +++ b/declarative/status/enhanced-logging.applecare-token.yaml @@ -39,4 +39,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/enhanced-logging.applecare-token/example1.json + - file: examples/declarative/status/enhanced-logging.applecare-token/example1.json diff --git a/declarative/status/enhanced-logging.status.yaml b/declarative/status/enhanced-logging.status.yaml index 3bd7cae..7500cc1 100644 --- a/declarative/status/enhanced-logging.status.yaml +++ b/declarative/status/enhanced-logging.status.yaml @@ -61,4 +61,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/enhanced-logging.status/example1.json + - file: examples/declarative/status/enhanced-logging.status/example1.json diff --git a/declarative/status/enhanced-logging.timestamp.yaml b/declarative/status/enhanced-logging.timestamp.yaml index 5a3786c..21842cd 100644 --- a/declarative/status/enhanced-logging.timestamp.yaml +++ b/declarative/status/enhanced-logging.timestamp.yaml @@ -40,4 +40,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/enhanced-logging.timestamp/example1.json + - file: examples/declarative/status/enhanced-logging.timestamp/example1.json diff --git a/declarative/status/management.client-capabilities.yaml b/declarative/status/management.client-capabilities.yaml index 0a03752..633c1eb 100644 --- a/declarative/status/management.client-capabilities.yaml +++ b/declarative/status/management.client-capabilities.yaml @@ -145,4 +145,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/management.client-capabilities/example1.json + - file: examples/declarative/status/management.client-capabilities/example1.json diff --git a/declarative/status/management.declarations.yaml b/declarative/status/management.declarations.yaml index 44aee0c..6acb21c 100644 --- a/declarative/status/management.declarations.yaml +++ b/declarative/status/management.declarations.yaml @@ -171,4 +171,4 @@ notes: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/management.declarations/example1.json + - file: examples/declarative/status/management.declarations/example1.json diff --git a/declarative/status/mdm.app.yaml b/declarative/status/mdm.app.yaml index ecb4d1c..3dbb144 100644 --- a/declarative/status/mdm.app.yaml +++ b/declarative/status/mdm.app.yaml @@ -120,7 +120,7 @@ examples: files: - tab: New or updated app description: Reports a new or updated app. - file: data/docc-examples/remotemanagementmodel/status/mdm.app/example1.json + file: examples/declarative/status/mdm.app/example1.json - tab: Removed app description: Reports a removed app. - file: data/docc-examples/remotemanagementmodel/status/mdm.app/example2.json + file: examples/declarative/status/mdm.app/example2.json diff --git a/declarative/status/mdm.enrollment-type.yaml b/declarative/status/mdm.enrollment-type.yaml index b68eb22..632bdf5 100644 --- a/declarative/status/mdm.enrollment-type.yaml +++ b/declarative/status/mdm.enrollment-type.yaml @@ -64,4 +64,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/mdm.enrollment-type/example1.json + - file: examples/declarative/status/mdm.enrollment-type/example1.json diff --git a/declarative/status/mdm.is-awaiting-configuration.yaml b/declarative/status/mdm.is-awaiting-configuration.yaml index 73b0615..6b24401 100644 --- a/declarative/status/mdm.is-awaiting-configuration.yaml +++ b/declarative/status/mdm.is-awaiting-configuration.yaml @@ -50,4 +50,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/mdm.is-awaiting-configuration/example1.json + - file: examples/declarative/status/mdm.is-awaiting-configuration/example1.json diff --git a/declarative/status/mdm.is-return-to-service.yaml b/declarative/status/mdm.is-return-to-service.yaml index a003bd5..c1c4f17 100644 --- a/declarative/status/mdm.is-return-to-service.yaml +++ b/declarative/status/mdm.is-return-to-service.yaml @@ -40,4 +40,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/mdm.is-return-to-service/example1.json + - file: examples/declarative/status/mdm.is-return-to-service/example1.json diff --git a/declarative/status/mdm.is-shared-ipad.yaml b/declarative/status/mdm.is-shared-ipad.yaml index 3b5de6e..d92cc18 100644 --- a/declarative/status/mdm.is-shared-ipad.yaml +++ b/declarative/status/mdm.is-shared-ipad.yaml @@ -32,4 +32,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/mdm.is-shared-ipad/example1.json + - file: examples/declarative/status/mdm.is-shared-ipad/example1.json diff --git a/declarative/status/mdm.push-magic.yaml b/declarative/status/mdm.push-magic.yaml index 2b807ed..e010542 100644 --- a/declarative/status/mdm.push-magic.yaml +++ b/declarative/status/mdm.push-magic.yaml @@ -54,4 +54,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/mdm.push-magic/example1.json + - file: examples/declarative/status/mdm.push-magic/example1.json diff --git a/declarative/status/mdm.push-token.yaml b/declarative/status/mdm.push-token.yaml index 9bea7ea..2adae8e 100644 --- a/declarative/status/mdm.push-token.yaml +++ b/declarative/status/mdm.push-token.yaml @@ -54,4 +54,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/mdm.push-token/example1.json + - file: examples/declarative/status/mdm.push-token/example1.json diff --git a/declarative/status/migration-assistant.report.yaml b/declarative/status/migration-assistant.report.yaml index bfb83bc..7294082 100644 --- a/declarative/status/migration-assistant.report.yaml +++ b/declarative/status/migration-assistant.report.yaml @@ -78,4 +78,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/migration-assistant.report/example1.json + - file: examples/declarative/status/migration-assistant.report/example1.json diff --git a/declarative/status/migration-assistant.state.yaml b/declarative/status/migration-assistant.state.yaml index 0e245a8..ecd6b8e 100644 --- a/declarative/status/migration-assistant.state.yaml +++ b/declarative/status/migration-assistant.state.yaml @@ -40,4 +40,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/migration-assistant.state/example1.json + - file: examples/declarative/status/migration-assistant.state/example1.json diff --git a/declarative/status/package.list.yaml b/declarative/status/package.list.yaml index 5067214..b7cd72f 100644 --- a/declarative/status/package.list.yaml +++ b/declarative/status/package.list.yaml @@ -135,7 +135,7 @@ examples: files: - tab: New or updated package description: Reports a new or updated package. - file: data/docc-examples/remotemanagementmodel/status/package.list/example1.json + file: examples/declarative/status/package.list/example1.json - tab: Removed package description: Reports a removed package. - file: data/docc-examples/remotemanagementmodel/status/package.list/example2.json + file: examples/declarative/status/package.list/example2.json diff --git a/declarative/status/passcode.is-compliant.yaml b/declarative/status/passcode.is-compliant.yaml index 56789c6..050e11f 100644 --- a/declarative/status/passcode.is-compliant.yaml +++ b/declarative/status/passcode.is-compliant.yaml @@ -48,4 +48,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/passcode.is-compliant/example1.json + - file: examples/declarative/status/passcode.is-compliant/example1.json diff --git a/declarative/status/passcode.is-present.yaml b/declarative/status/passcode.is-present.yaml index c4a1201..b006b5d 100644 --- a/declarative/status/passcode.is-present.yaml +++ b/declarative/status/passcode.is-present.yaml @@ -49,4 +49,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/passcode.is-present/example1.json + - file: examples/declarative/status/passcode.is-present/example1.json diff --git a/declarative/status/screensharing.connection.group.unresolved-connection.yaml b/declarative/status/screensharing.connection.group.unresolved-connection.yaml index a0e26da..d1dff6c 100644 --- a/declarative/status/screensharing.connection.group.unresolved-connection.yaml +++ b/declarative/status/screensharing.connection.group.unresolved-connection.yaml @@ -63,7 +63,7 @@ examples: files: - tab: New or updated connection group description: Reports a new or updated connection group. - file: data/docc-examples/remotemanagementmodel/status/screensharing.connection.group.unresolved-connection/example1.json + file: examples/declarative/status/screensharing.connection.group.unresolved-connection/example1.json - tab: Removed connection group description: Reports a removed connection group. - file: data/docc-examples/remotemanagementmodel/status/screensharing.connection.group.unresolved-connection/example2.json + file: examples/declarative/status/screensharing.connection.group.unresolved-connection/example2.json diff --git a/declarative/status/security.certificate.list.yaml b/declarative/status/security.certificate.list.yaml index c6682a4..d274e47 100644 --- a/declarative/status/security.certificate.list.yaml +++ b/declarative/status/security.certificate.list.yaml @@ -101,7 +101,7 @@ examples: files: - tab: New or updated certificate description: Reports a new or updated certificate. - file: data/docc-examples/remotemanagementmodel/status/security.certificate.list/example1.json + file: examples/declarative/status/security.certificate.list/example1.json - tab: Removed certificate description: Reports a removed certificate. - file: data/docc-examples/remotemanagementmodel/status/security.certificate.list/example2.json + file: examples/declarative/status/security.certificate.list/example2.json diff --git a/declarative/status/security.lockdown-mode.yaml b/declarative/status/security.lockdown-mode.yaml index de35232..5240c31 100644 --- a/declarative/status/security.lockdown-mode.yaml +++ b/declarative/status/security.lockdown-mode.yaml @@ -36,4 +36,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/security.lockdown-mode/example1.json + - file: examples/declarative/status/security.lockdown-mode/example1.json diff --git a/declarative/status/services.background-task.yaml b/declarative/status/services.background-task.yaml index ccef7f6..cc0a0f0 100644 --- a/declarative/status/services.background-task.yaml +++ b/declarative/status/services.background-task.yaml @@ -147,7 +147,7 @@ examples: files: - tab: New or updated task description: Reports a new or updated background task. - file: data/docc-examples/remotemanagementmodel/status/services.background-task/example1.json + file: examples/declarative/status/services.background-task/example1.json - tab: Removed task description: Reports a removed background task. - file: data/docc-examples/remotemanagementmodel/status/services.background-task/example2.json + file: examples/declarative/status/services.background-task/example2.json diff --git a/declarative/status/softwareupdate.beta-enrollment.yaml b/declarative/status/softwareupdate.beta-enrollment.yaml index 486a0c7..e611820 100644 --- a/declarative/status/softwareupdate.beta-enrollment.yaml +++ b/declarative/status/softwareupdate.beta-enrollment.yaml @@ -35,4 +35,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/softwareupdate.beta-enrollment/example1.json + - file: examples/declarative/status/softwareupdate.beta-enrollment/example1.json diff --git a/declarative/status/softwareupdate.device-id.yaml b/declarative/status/softwareupdate.device-id.yaml index dab1026..14ed638 100644 --- a/declarative/status/softwareupdate.device-id.yaml +++ b/declarative/status/softwareupdate.device-id.yaml @@ -45,4 +45,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/softwareupdate.device-id/example1.json + - file: examples/declarative/status/softwareupdate.device-id/example1.json diff --git a/declarative/status/softwareupdate.failure-reason.yaml b/declarative/status/softwareupdate.failure-reason.yaml index 80b595e..02347d5 100644 --- a/declarative/status/softwareupdate.failure-reason.yaml +++ b/declarative/status/softwareupdate.failure-reason.yaml @@ -65,4 +65,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/softwareupdate.failure-reason/example1.json + - file: examples/declarative/status/softwareupdate.failure-reason/example1.json diff --git a/declarative/status/softwareupdate.install-reason.yaml b/declarative/status/softwareupdate.install-reason.yaml index c04d5f2..9650efd 100644 --- a/declarative/status/softwareupdate.install-reason.yaml +++ b/declarative/status/softwareupdate.install-reason.yaml @@ -83,4 +83,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/softwareupdate.install-reason/example1.json + - file: examples/declarative/status/softwareupdate.install-reason/example1.json diff --git a/declarative/status/softwareupdate.install-state.yaml b/declarative/status/softwareupdate.install-state.yaml index dcc7bed..67f32c5 100644 --- a/declarative/status/softwareupdate.install-state.yaml +++ b/declarative/status/softwareupdate.install-state.yaml @@ -57,4 +57,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/softwareupdate.install-state/example1.json + - file: examples/declarative/status/softwareupdate.install-state/example1.json diff --git a/declarative/status/softwareupdate.pending-version.yaml b/declarative/status/softwareupdate.pending-version.yaml index b55b7de..875a9fe 100644 --- a/declarative/status/softwareupdate.pending-version.yaml +++ b/declarative/status/softwareupdate.pending-version.yaml @@ -66,4 +66,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/softwareupdate.pending-version/example1.json + - file: examples/declarative/status/softwareupdate.pending-version/example1.json diff --git a/declarative/status/statusreason.yaml b/declarative/status/statusreason.yaml index 5664f85..12c2343 100644 --- a/declarative/status/statusreason.yaml +++ b/declarative/status/statusreason.yaml @@ -36,4 +36,4 @@ notes: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/statusreason/example1.json + - file: examples/declarative/status/statusreason/example1.json diff --git a/declarative/status/test.array-value.yaml b/declarative/status/test.array-value.yaml index 65d1d1b..872e981 100644 --- a/declarative/status/test.array-value.yaml +++ b/declarative/status/test.array-value.yaml @@ -75,4 +75,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/test.array-value/example1.json + - file: examples/declarative/status/test.array-value/example1.json diff --git a/declarative/status/test.boolean-value.yaml b/declarative/status/test.boolean-value.yaml index 691bba9..0d6e77e 100644 --- a/declarative/status/test.boolean-value.yaml +++ b/declarative/status/test.boolean-value.yaml @@ -58,4 +58,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/test.boolean-value/example1.json + - file: examples/declarative/status/test.boolean-value/example1.json diff --git a/declarative/status/test.dictionary-value.yaml b/declarative/status/test.dictionary-value.yaml index 1a6d57c..d27e5a3 100644 --- a/declarative/status/test.dictionary-value.yaml +++ b/declarative/status/test.dictionary-value.yaml @@ -70,4 +70,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/test.dictionary-value/example1.json + - file: examples/declarative/status/test.dictionary-value/example1.json diff --git a/declarative/status/test.error-value.yaml b/declarative/status/test.error-value.yaml index 4a0cb0f..aebead5 100644 --- a/declarative/status/test.error-value.yaml +++ b/declarative/status/test.error-value.yaml @@ -58,4 +58,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/test.error-value/example1.json + - file: examples/declarative/status/test.error-value/example1.json diff --git a/declarative/status/test.integer-value.yaml b/declarative/status/test.integer-value.yaml index 47e261d..79e4259 100644 --- a/declarative/status/test.integer-value.yaml +++ b/declarative/status/test.integer-value.yaml @@ -58,4 +58,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/test.integer-value/example1.json + - file: examples/declarative/status/test.integer-value/example1.json diff --git a/declarative/status/test.real-value.yaml b/declarative/status/test.real-value.yaml index f54808d..61157c9 100644 --- a/declarative/status/test.real-value.yaml +++ b/declarative/status/test.real-value.yaml @@ -58,4 +58,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/test.real-value/example1.json + - file: examples/declarative/status/test.real-value/example1.json diff --git a/declarative/status/test.string-value.yaml b/declarative/status/test.string-value.yaml index dabe295..735ea90 100644 --- a/declarative/status/test.string-value.yaml +++ b/declarative/status/test.string-value.yaml @@ -58,4 +58,4 @@ payloadkeys: examples: - title: Status item example files: - - file: data/docc-examples/remotemanagementmodel/status/test.string-value/example1.json + - file: examples/declarative/status/test.string-value/example1.json diff --git a/examples/declarative/status/account.list.caldav/example1.json b/examples/declarative/status/account.list.caldav/example1.json new file mode 100644 index 0000000..76eeb30 --- /dev/null +++ b/examples/declarative/status/account.list.caldav/example1.json @@ -0,0 +1,18 @@ +{ + "account": { + "list": { + "caldav": [ + { + "identifier": "C8AD8975-FC88-4B44-AE17-123456789012", + "declaration-identifier": "com.example.caldav-account", + "visible-name": "Work Calendar", + "hostname": "caldav.example.com", + "port": 443, + "username": "user@example.com", + "are-calendars-enabled": true, + "are-reminders-enabled": true + } + ] + } + } +} diff --git a/examples/declarative/status/account.list.caldav/example2.json b/examples/declarative/status/account.list.caldav/example2.json new file mode 100644 index 0000000..6a122fc --- /dev/null +++ b/examples/declarative/status/account.list.caldav/example2.json @@ -0,0 +1,12 @@ +{ + "account": { + "list": { + "caldav": [ + { + "identifier": "C8AD8975-FC88-4B44-AE17-123456789012", + "_removed": true + } + ] + } + } +} diff --git a/examples/declarative/status/account.list.carddav/example1.json b/examples/declarative/status/account.list.carddav/example1.json new file mode 100644 index 0000000..4301c78 --- /dev/null +++ b/examples/declarative/status/account.list.carddav/example1.json @@ -0,0 +1,16 @@ +{ + "account": { + "list": { + "carddav": [ + { + "identifier": "D9BE9076-GD99-5C55-BF28-234567890123", + "declaration-identifier": "com.example.carddav-account", + "visible-name": "Work Contacts", + "hostname": "carddav.example.com", + "port": 443, + "username": "user@example.com" + } + ] + } + } +} diff --git a/examples/declarative/status/account.list.carddav/example2.json b/examples/declarative/status/account.list.carddav/example2.json new file mode 100644 index 0000000..3cc218a --- /dev/null +++ b/examples/declarative/status/account.list.carddav/example2.json @@ -0,0 +1,12 @@ +{ + "account": { + "list": { + "carddav": [ + { + "identifier": "D9BE9076-GD99-5C55-BF28-234567890123", + "_removed": true + } + ] + } + } +} diff --git a/examples/declarative/status/account.list.exchange/example1.json b/examples/declarative/status/account.list.exchange/example1.json new file mode 100644 index 0000000..14de9f8 --- /dev/null +++ b/examples/declarative/status/account.list.exchange/example1.json @@ -0,0 +1,21 @@ +{ + "account": { + "list": { + "exchange": [ + { + "identifier": "E0CF0187-HE00-6D66-CG39-345678901234", + "declaration-identifier": "com.example.exchange-account", + "visible-name": "Work Exchange", + "hostname": "mail.example.com", + "port": 443, + "username": "user@example.com", + "is-mail-enabled": true, + "are-calendars-enabled": true, + "are-contacts-enabled": true, + "are-notes-enabled": true, + "are-reminders-enabled": true + } + ] + } + } +} diff --git a/examples/declarative/status/account.list.exchange/example2.json b/examples/declarative/status/account.list.exchange/example2.json new file mode 100644 index 0000000..8fc200d --- /dev/null +++ b/examples/declarative/status/account.list.exchange/example2.json @@ -0,0 +1,12 @@ +{ + "account": { + "list": { + "exchange": [ + { + "identifier": "E0CF0187-HE00-6D66-CG39-345678901234", + "_removed": true + } + ] + } + } +} diff --git a/examples/declarative/status/account.list.google/example1.json b/examples/declarative/status/account.list.google/example1.json new file mode 100644 index 0000000..98c0ced --- /dev/null +++ b/examples/declarative/status/account.list.google/example1.json @@ -0,0 +1,18 @@ +{ + "account": { + "list": { + "google": [ + { + "identifier": "F1D01298-IF11-7E77-DH40-456789012345", + "declaration-identifier": "com.example.google-account", + "visible-name": "Work Google", + "username": "user@example.com", + "is-mail-enabled": true, + "are-calendars-enabled": true, + "are-contacts-enabled": true, + "are-notes-enabled": false + } + ] + } + } +} diff --git a/examples/declarative/status/account.list.google/example2.json b/examples/declarative/status/account.list.google/example2.json new file mode 100644 index 0000000..1455750 --- /dev/null +++ b/examples/declarative/status/account.list.google/example2.json @@ -0,0 +1,12 @@ +{ + "account": { + "list": { + "google": [ + { + "identifier": "F1D01298-IF11-7E77-DH40-456789012345", + "_removed": true + } + ] + } + } +} diff --git a/examples/declarative/status/account.list.ldap/example1.json b/examples/declarative/status/account.list.ldap/example1.json new file mode 100644 index 0000000..d912d4f --- /dev/null +++ b/examples/declarative/status/account.list.ldap/example1.json @@ -0,0 +1,17 @@ +{ + "account": { + "list": { + "ldap": [ + { + "identifier": "G2E12309-JG22-8F88-EI51-567890123456", + "declaration-identifier": "com.example.ldap-account", + "visible-name": "Corporate Directory", + "hostname": "ldap.example.com", + "port": 636, + "username": "user@example.com", + "is-enabled": true + } + ] + } + } +} diff --git a/examples/declarative/status/account.list.ldap/example2.json b/examples/declarative/status/account.list.ldap/example2.json new file mode 100644 index 0000000..b5b0bfd --- /dev/null +++ b/examples/declarative/status/account.list.ldap/example2.json @@ -0,0 +1,12 @@ +{ + "account": { + "list": { + "ldap": [ + { + "identifier": "G2E12309-JG22-8F88-EI51-567890123456", + "_removed": true + } + ] + } + } +} diff --git a/examples/declarative/status/account.list.mail.incoming/example1.json b/examples/declarative/status/account.list.mail.incoming/example1.json new file mode 100644 index 0000000..3f6aead --- /dev/null +++ b/examples/declarative/status/account.list.mail.incoming/example1.json @@ -0,0 +1,20 @@ +{ + "account": { + "list": { + "mail": { + "incoming": [ + { + "identifier": "H3F23410-KH33-9G99-FJ62-678901234567", + "declaration-identifier": "com.example.mail-account", + "visible-name": "Work Mail", + "hostname": "imap.example.com", + "port": 993, + "username": "user@example.com", + "is-mail-enabled": true, + "are-notes-enabled": true + } + ] + } + } + } +} diff --git a/examples/declarative/status/account.list.mail.incoming/example2.json b/examples/declarative/status/account.list.mail.incoming/example2.json new file mode 100644 index 0000000..b735308 --- /dev/null +++ b/examples/declarative/status/account.list.mail.incoming/example2.json @@ -0,0 +1,14 @@ +{ + "account": { + "list": { + "mail": { + "incoming": [ + { + "identifier": "H3F23410-KH33-9G99-FJ62-678901234567", + "_removed": true + } + ] + } + } + } +} diff --git a/examples/declarative/status/account.list.mail.outgoing/example1.json b/examples/declarative/status/account.list.mail.outgoing/example1.json new file mode 100644 index 0000000..27a8282 --- /dev/null +++ b/examples/declarative/status/account.list.mail.outgoing/example1.json @@ -0,0 +1,18 @@ +{ + "account": { + "list": { + "mail": { + "outgoing": [ + { + "identifier": "I4G34521-LI44-0H00-GK73-789012345678", + "declaration-identifier": "com.example.mail-account", + "visible-name": "Work Mail (SMTP)", + "hostname": "smtp.example.com", + "port": 587, + "username": "user@example.com" + } + ] + } + } + } +} diff --git a/examples/declarative/status/account.list.mail.outgoing/example2.json b/examples/declarative/status/account.list.mail.outgoing/example2.json new file mode 100644 index 0000000..4ec7274 --- /dev/null +++ b/examples/declarative/status/account.list.mail.outgoing/example2.json @@ -0,0 +1,14 @@ +{ + "account": { + "list": { + "mail": { + "outgoing": [ + { + "identifier": "I4G34521-LI44-0H00-GK73-789012345678", + "_removed": true + } + ] + } + } + } +} diff --git a/examples/declarative/status/account.list.subscribed-calendar/example1.json b/examples/declarative/status/account.list.subscribed-calendar/example1.json new file mode 100644 index 0000000..4c5bcdb --- /dev/null +++ b/examples/declarative/status/account.list.subscribed-calendar/example1.json @@ -0,0 +1,16 @@ +{ + "account": { + "list": { + "subscribed-calendar": [ + { + "identifier": "J5H45632-MJ55-1I11-HL84-890123456789", + "declaration-identifier": "com.example.subscribed-calendar", + "visible-name": "Company Holidays", + "calendar-url": "https://calendar.example.com/holidays.ics", + "username": "user@example.com", + "is-enabled": true + } + ] + } + } +} diff --git a/examples/declarative/status/account.list.subscribed-calendar/example2.json b/examples/declarative/status/account.list.subscribed-calendar/example2.json new file mode 100644 index 0000000..2a6f205 --- /dev/null +++ b/examples/declarative/status/account.list.subscribed-calendar/example2.json @@ -0,0 +1,12 @@ +{ + "account": { + "list": { + "subscribed-calendar": [ + { + "identifier": "J5H45632-MJ55-1I11-HL84-890123456789", + "_removed": true + } + ] + } + } +} diff --git a/examples/declarative/status/app.managed.list/example1.json b/examples/declarative/status/app.managed.list/example1.json new file mode 100644 index 0000000..44fe257 --- /dev/null +++ b/examples/declarative/status/app.managed.list/example1.json @@ -0,0 +1,17 @@ +{ + "app": { + "managed": { + "list": [ + { + "identifier": "com.example.productivity", + "declaration-identifier": "com.example.app-management", + "name": "Productivity App", + "external-version-id": 845960, + "version": "5.2.1", + "short-version": "5.2.1", + "state": "managed" + } + ] + } + } +} diff --git a/examples/declarative/status/app.managed.list/example2.json b/examples/declarative/status/app.managed.list/example2.json new file mode 100644 index 0000000..1ca7f73 --- /dev/null +++ b/examples/declarative/status/app.managed.list/example2.json @@ -0,0 +1,12 @@ +{ + "app": { + "managed": { + "list": [ + { + "identifier": "com.example.productivity", + "_removed": true + } + ] + } + } +} diff --git a/examples/declarative/status/content-cache.info/example1.json b/examples/declarative/status/content-cache.info/example1.json new file mode 100644 index 0000000..41765f2 --- /dev/null +++ b/examples/declarative/status/content-cache.info/example1.json @@ -0,0 +1,14 @@ +{ + "content-cache": { + "info": { + "cache-free": 10737418240, + "cache-limit": 0, + "cache-status": "OK", + "cache-used": 5368709120, + "max-cache-pressure-last-hour": 0.15, + "personal-cache-free": 2147483648, + "personal-cache-limit": 0, + "personal-cache-used": 1073741824 + } + } +} diff --git a/examples/declarative/status/content-cache.parents/example1.json b/examples/declarative/status/content-cache.parents/example1.json new file mode 100644 index 0000000..e3f14a4 --- /dev/null +++ b/examples/declarative/status/content-cache.parents/example1.json @@ -0,0 +1,13 @@ +{ + "content-cache": { + "parents": [ + { + "identifier": "A1B2C3D4-E5F6-7890-ABCD-EF1234567890", + "address": "192.168.1.10", + "port": 51194, + "healthy": true, + "version": "2.0" + } + ] + } +} diff --git a/examples/declarative/status/content-cache.parents/example2.json b/examples/declarative/status/content-cache.parents/example2.json new file mode 100644 index 0000000..fc6e20d --- /dev/null +++ b/examples/declarative/status/content-cache.parents/example2.json @@ -0,0 +1,10 @@ +{ + "content-cache": { + "parents": [ + { + "identifier": "A1B2C3D4-E5F6-7890-ABCD-EF1234567890", + "_removed": true + } + ] + } +} diff --git a/examples/declarative/status/content-cache.peers/example1.json b/examples/declarative/status/content-cache.peers/example1.json new file mode 100644 index 0000000..99a1bb9 --- /dev/null +++ b/examples/declarative/status/content-cache.peers/example1.json @@ -0,0 +1,14 @@ +{ + "content-cache": { + "peers": [ + { + "identifier": "B2C3D4E5-F6A7-8901-BCDE-F01234567891", + "address": "192.168.1.20", + "port": 51194, + "friendly": true, + "healthy": true, + "version": "2.0" + } + ] + } +} diff --git a/examples/declarative/status/content-cache.peers/example2.json b/examples/declarative/status/content-cache.peers/example2.json new file mode 100644 index 0000000..a98f4dd --- /dev/null +++ b/examples/declarative/status/content-cache.peers/example2.json @@ -0,0 +1,10 @@ +{ + "content-cache": { + "peers": [ + { + "identifier": "B2C3D4E5-F6A7-8901-BCDE-F01234567891", + "_removed": true + } + ] + } +} diff --git a/examples/declarative/status/content-cache.status/example1.json b/examples/declarative/status/content-cache.status/example1.json new file mode 100644 index 0000000..8122048 --- /dev/null +++ b/examples/declarative/status/content-cache.status/example1.json @@ -0,0 +1,20 @@ +{ + "content-cache": { + "status": { + "server-guid": "C3D4E5F6-A7B8-9012-CDEF-012345678912", + "activated": true, + "active": true, + "cache-status": "OK", + "private-addresses": [ + "192.168.1.5" + ], + "public-address": "203.0.113.5", + "port": 51194, + "registration-status": 1, + "startup-status": "OK", + "tetherator-status": 0, + "sending-reports": false, + "version": "2.0" + } + } +} diff --git a/examples/declarative/status/device.identifier.serial-number/example1.json b/examples/declarative/status/device.identifier.serial-number/example1.json new file mode 100644 index 0000000..4f880fc --- /dev/null +++ b/examples/declarative/status/device.identifier.serial-number/example1.json @@ -0,0 +1,7 @@ +{ + "device": { + "identifier": { + "serial-number": "12345678" + } + } +} diff --git a/examples/declarative/status/device.identifier.udid/example1.json b/examples/declarative/status/device.identifier.udid/example1.json new file mode 100644 index 0000000..24dd3b5 --- /dev/null +++ b/examples/declarative/status/device.identifier.udid/example1.json @@ -0,0 +1,7 @@ +{ + "device": { + "identifier": { + "udid": "123456-89012345" + } + } +} diff --git a/examples/declarative/status/device.model.family/example1.json b/examples/declarative/status/device.model.family/example1.json new file mode 100644 index 0000000..f078dc5 --- /dev/null +++ b/examples/declarative/status/device.model.family/example1.json @@ -0,0 +1,7 @@ +{ + "device": { + "model": { + "family": "iPhone" + } + } +} diff --git a/examples/declarative/status/device.model.identifier/example1.json b/examples/declarative/status/device.model.identifier/example1.json new file mode 100644 index 0000000..09f1f6c --- /dev/null +++ b/examples/declarative/status/device.model.identifier/example1.json @@ -0,0 +1,7 @@ +{ + "device": { + "model": { + "identifier": "iPhone14,5" + } + } +} diff --git a/examples/declarative/status/device.model.marketing-name/example1.json b/examples/declarative/status/device.model.marketing-name/example1.json new file mode 100644 index 0000000..68539ea --- /dev/null +++ b/examples/declarative/status/device.model.marketing-name/example1.json @@ -0,0 +1,7 @@ +{ + "device": { + "model": { + "marketing-name": "iPhone 13" + } + } +} diff --git a/examples/declarative/status/device.model.number/example1.json b/examples/declarative/status/device.model.number/example1.json new file mode 100644 index 0000000..b9e5c41 --- /dev/null +++ b/examples/declarative/status/device.model.number/example1.json @@ -0,0 +1,7 @@ +{ + "device": { + "model": { + "number": "ABCDEF/G" + } + } +} diff --git a/examples/declarative/status/device.operating-system.build-version/example1.json b/examples/declarative/status/device.operating-system.build-version/example1.json new file mode 100644 index 0000000..d82f900 --- /dev/null +++ b/examples/declarative/status/device.operating-system.build-version/example1.json @@ -0,0 +1,7 @@ +{ + "device": { + "operating-system": { + "build-version": "24A346" + } + } +} diff --git a/examples/declarative/status/device.operating-system.family/example1.json b/examples/declarative/status/device.operating-system.family/example1.json new file mode 100644 index 0000000..ac94e24 --- /dev/null +++ b/examples/declarative/status/device.operating-system.family/example1.json @@ -0,0 +1,7 @@ +{ + "device": { + "operating-system": { + "family": "iOS" + } + } +} diff --git a/examples/declarative/status/device.operating-system.marketing-name/example1.json b/examples/declarative/status/device.operating-system.marketing-name/example1.json new file mode 100644 index 0000000..9346e53 --- /dev/null +++ b/examples/declarative/status/device.operating-system.marketing-name/example1.json @@ -0,0 +1,7 @@ +{ + "device": { + "operating-system": { + "marketing-name": "iOS 27.0" + } + } +} diff --git a/examples/declarative/status/device.operating-system.supplemental.build-version/example1.json b/examples/declarative/status/device.operating-system.supplemental.build-version/example1.json new file mode 100644 index 0000000..bfe3fdc --- /dev/null +++ b/examples/declarative/status/device.operating-system.supplemental.build-version/example1.json @@ -0,0 +1,9 @@ +{ + "device": { + "operating-system": { + "supplemental": { + "build-version": "24A346a" + } + } + } +} diff --git a/examples/declarative/status/device.operating-system.supplemental.extra-version/example1.json b/examples/declarative/status/device.operating-system.supplemental.extra-version/example1.json new file mode 100644 index 0000000..5289e04 --- /dev/null +++ b/examples/declarative/status/device.operating-system.supplemental.extra-version/example1.json @@ -0,0 +1,9 @@ +{ + "device": { + "operating-system": { + "supplemental": { + "extra-version": "a" + } + } + } +} diff --git a/examples/declarative/status/device.operating-system.version/example1.json b/examples/declarative/status/device.operating-system.version/example1.json new file mode 100644 index 0000000..595d29c --- /dev/null +++ b/examples/declarative/status/device.operating-system.version/example1.json @@ -0,0 +1,7 @@ +{ + "device": { + "operating-system": { + "version": "27.0" + } + } +} diff --git a/examples/declarative/status/device.power.battery-health/example1.json b/examples/declarative/status/device.power.battery-health/example1.json new file mode 100644 index 0000000..e27de74 --- /dev/null +++ b/examples/declarative/status/device.power.battery-health/example1.json @@ -0,0 +1,7 @@ +{ + "device": { + "power": { + "battery-health": "normal" + } + } +} diff --git a/examples/declarative/status/device.system.health/example1.json b/examples/declarative/status/device.system.health/example1.json new file mode 100644 index 0000000..16f7747 --- /dev/null +++ b/examples/declarative/status/device.system.health/example1.json @@ -0,0 +1,11 @@ +{ + "device": { + "system": { + "health": { + "Camera": "ok", + "Display": "ok", + "FaceID": "ok" + } + } + } +} diff --git a/examples/declarative/status/diskmanagement.filevault.enabled/example1.json b/examples/declarative/status/diskmanagement.filevault.enabled/example1.json new file mode 100644 index 0000000..ad8c327 --- /dev/null +++ b/examples/declarative/status/diskmanagement.filevault.enabled/example1.json @@ -0,0 +1,7 @@ +{ + "diskmanagement": { + "filevault": { + "enabled": true + } + } +} diff --git a/examples/declarative/status/enhanced-logging.applecare-token/example1.json b/examples/declarative/status/enhanced-logging.applecare-token/example1.json new file mode 100644 index 0000000..762f32e --- /dev/null +++ b/examples/declarative/status/enhanced-logging.applecare-token/example1.json @@ -0,0 +1,5 @@ +{ + "enhanced-logging": { + "applecare-token": "ABC123DEF456" + } +} diff --git a/examples/declarative/status/enhanced-logging.status/example1.json b/examples/declarative/status/enhanced-logging.status/example1.json new file mode 100644 index 0000000..e1d8677 --- /dev/null +++ b/examples/declarative/status/enhanced-logging.status/example1.json @@ -0,0 +1,5 @@ +{ + "enhanced-logging": { + "status": "collecting" + } +} diff --git a/examples/declarative/status/enhanced-logging.timestamp/example1.json b/examples/declarative/status/enhanced-logging.timestamp/example1.json new file mode 100644 index 0000000..6f63774 --- /dev/null +++ b/examples/declarative/status/enhanced-logging.timestamp/example1.json @@ -0,0 +1,5 @@ +{ + "enhanced-logging": { + "timestamp": "2025-05-15T10:30:00Z" + } +} diff --git a/examples/declarative/status/management.client-capabilities/example1.json b/examples/declarative/status/management.client-capabilities/example1.json new file mode 100644 index 0000000..bbb400c --- /dev/null +++ b/examples/declarative/status/management.client-capabilities/example1.json @@ -0,0 +1,125 @@ +{ + "management": { + "client-capabilities": { + "supported-features": {}, + "supported-payloads": { + "declarations": { + "activations": [ + "com.apple.activation.simple" + ], + "assets": [ + "com.apple.asset.credential.acme", + "com.apple.asset.credential.certificate", + "com.apple.asset.credential.identity", + "com.apple.asset.credential.scep", + "com.apple.asset.credential.userpassword", + "com.apple.asset.data", + "com.apple.asset.useridentity" + ], + "configurations": [ + "com.apple.configuration.account.caldav", + "com.apple.configuration.account.carddav", + "com.apple.configuration.account.exchange", + "com.apple.configuration.account.google", + "com.apple.configuration.account.ldap", + "com.apple.configuration.account.mail", + "com.apple.configuration.account.subscribed-calendar", + "com.apple.configuration.app.managed", + "com.apple.configuration.app.settings", + "com.apple.configuration.audio-accessory.settings", + "com.apple.configuration.extensible-sso", + "com.apple.configuration.external-intelligence.settings", + "com.apple.configuration.intelligence.settings", + "com.apple.configuration.keyboard.settings", + "com.apple.configuration.legacy", + "com.apple.configuration.legacy.interactive", + "com.apple.configuration.management.status-subscriptions", + "com.apple.configuration.management.test", + "com.apple.configuration.math.settings", + "com.apple.configuration.network.dns-proxy", + "com.apple.configuration.network.dns-settings", + "com.apple.configuration.network.relay", + "com.apple.configuration.network.vpn.always-on", + "com.apple.configuration.network.vpn.ikev2", + "com.apple.configuration.network.vpn.ipsec", + "com.apple.configuration.network.vpn.vpn-plugin", + "com.apple.configuration.passcode.settings", + "com.apple.configuration.safari.bookmarks", + "com.apple.configuration.safari.extensions.settings", + "com.apple.configuration.safari.settings", + "com.apple.configuration.security.certificate", + "com.apple.configuration.security.identity", + "com.apple.configuration.security.passkey.attestation", + "com.apple.configuration.siri.settings", + "com.apple.configuration.softwareupdate.enforcement.specific", + "com.apple.configuration.softwareupdate.settings", + "com.apple.configuration.watch.enrollment", + "com.apple.configuration.webcontent-filter.plugin" + ], + "management": [ + "com.apple.management.organization-info", + "com.apple.management.properties", + "com.apple.management.server-capabilities" + ] + }, + "status-items": [ + "account.list.caldav", + "account.list.carddav", + "account.list.exchange", + "account.list.google", + "account.list.ldap", + "account.list.mail.incoming", + "account.list.mail.outgoing", + "account.list.subscribed-calendar", + "app.managed.list", + "device.identifier.serial-number", + "device.identifier.udid", + "device.model.family", + "device.model.identifier", + "device.model.marketing-name", + "device.model.number", + "device.operating-system.build-version", + "device.operating-system.family", + "device.operating-system.marketing-name", + "device.operating-system.supplemental.build-version", + "device.operating-system.supplemental.extra-version", + "device.operating-system.version", + "device.power.battery-health", + "device.system.health", + "enhanced-logging.applecare-token", + "enhanced-logging.status", + "enhanced-logging.timestamp", + "management.client-capabilities", + "management.declarations", + "mdm.app", + "mdm.enrollment-type", + "mdm.is-awaiting-configuration", + "mdm.is-return-to-service", + "mdm.is-shared-ipad", + "mdm.push-magic", + "mdm.push-token", + "passcode.is-compliant", + "passcode.is-present", + "security.certificate.list", + "security.lockdown-mode", + "softwareupdate.beta-enrollment", + "softwareupdate.device-id", + "softwareupdate.failure-reason", + "softwareupdate.install-reason", + "softwareupdate.install-state", + "softwareupdate.pending-version", + "test.array-value", + "test.boolean-value", + "test.dictionary-value", + "test.error-value", + "test.integer-value", + "test.real-value", + "test.string-value" + ] + }, + "supported-versions": [ + "1.0.0" + ] + } + } +} diff --git a/examples/declarative/status/management.declarations/example1.json b/examples/declarative/status/management.declarations/example1.json new file mode 100644 index 0000000..f361413 --- /dev/null +++ b/examples/declarative/status/management.declarations/example1.json @@ -0,0 +1,24 @@ +{ + "management": { + "declarations": { + "activations": [ + { + "identifier": "com.example.activation.main", + "server-token": "A1B2C3D4-E5F6-7890-ABCD-EF1234567890", + "active": true, + "valid": "valid" + } + ], + "configurations": [ + { + "identifier": "com.example.config.passcode", + "server-token": "B2C3D4E5-F6A7-8901-BCDE-F01234567891", + "active": true, + "valid": "valid" + } + ], + "assets": [], + "management": [] + } + } +} diff --git a/examples/declarative/status/mdm.app/example1.json b/examples/declarative/status/mdm.app/example1.json new file mode 100644 index 0000000..be9cc39 --- /dev/null +++ b/examples/declarative/status/mdm.app/example1.json @@ -0,0 +1,13 @@ +{ + "mdm": { + "app": [ + { + "identifier": "com.example.enterprise.app", + "name": "Enterprise App", + "version": "3.1.0", + "short-version": "3.1.0", + "state": "managed" + } + ] + } +} diff --git a/examples/declarative/status/mdm.app/example2.json b/examples/declarative/status/mdm.app/example2.json new file mode 100644 index 0000000..8feccdf --- /dev/null +++ b/examples/declarative/status/mdm.app/example2.json @@ -0,0 +1,10 @@ +{ + "mdm": { + "app": [ + { + "identifier": "com.example.enterprise.app", + "_removed": true + } + ] + } +} diff --git a/examples/declarative/status/mdm.enrollment-type/example1.json b/examples/declarative/status/mdm.enrollment-type/example1.json new file mode 100644 index 0000000..6476059 --- /dev/null +++ b/examples/declarative/status/mdm.enrollment-type/example1.json @@ -0,0 +1,5 @@ +{ + "mdm": { + "enrollment-type": "supervised" + } +} diff --git a/examples/declarative/status/mdm.is-awaiting-configuration/example1.json b/examples/declarative/status/mdm.is-awaiting-configuration/example1.json new file mode 100644 index 0000000..7594d0f --- /dev/null +++ b/examples/declarative/status/mdm.is-awaiting-configuration/example1.json @@ -0,0 +1,5 @@ +{ + "mdm": { + "is-awaiting-configuration": false + } +} diff --git a/examples/declarative/status/mdm.is-return-to-service/example1.json b/examples/declarative/status/mdm.is-return-to-service/example1.json new file mode 100644 index 0000000..a89e090 --- /dev/null +++ b/examples/declarative/status/mdm.is-return-to-service/example1.json @@ -0,0 +1,5 @@ +{ + "mdm": { + "is-return-to-service": false + } +} diff --git a/examples/declarative/status/mdm.is-shared-ipad/example1.json b/examples/declarative/status/mdm.is-shared-ipad/example1.json new file mode 100644 index 0000000..09c8044 --- /dev/null +++ b/examples/declarative/status/mdm.is-shared-ipad/example1.json @@ -0,0 +1,5 @@ +{ + "mdm": { + "is-shared-ipad": false + } +} diff --git a/examples/declarative/status/mdm.push-magic/example1.json b/examples/declarative/status/mdm.push-magic/example1.json new file mode 100644 index 0000000..9ea5dad --- /dev/null +++ b/examples/declarative/status/mdm.push-magic/example1.json @@ -0,0 +1,5 @@ +{ + "mdm": { + "push-magic": "3B5D81A2-9F4E-4B7C-A8D6-1E2F3A4B5C6D" + } +} diff --git a/examples/declarative/status/mdm.push-token/example1.json b/examples/declarative/status/mdm.push-token/example1.json new file mode 100644 index 0000000..3b60326 --- /dev/null +++ b/examples/declarative/status/mdm.push-token/example1.json @@ -0,0 +1,5 @@ +{ + "mdm": { + "push-token": "4A8B3F2E1D9C7B6A5E4D3C2B1A0F9E8D7C6B5A4E3D2C1B0A" + } +} diff --git a/examples/declarative/status/migration-assistant.report/example1.json b/examples/declarative/status/migration-assistant.report/example1.json new file mode 100644 index 0000000..7411275 --- /dev/null +++ b/examples/declarative/status/migration-assistant.report/example1.json @@ -0,0 +1,14 @@ +{ + "migration-assistant": { + "report": { + "completed-data-size": 53687091200, + "completed-file-count": 125000, + "completion-time": "2025-05-15T14:30:00Z", + "source-user": "user", + "start-time": "2025-05-15T12:00:00Z", + "target-user": "user", + "total-data-size": 53687091200, + "total-file-count": 125000 + } + } +} diff --git a/examples/declarative/status/migration-assistant.state/example1.json b/examples/declarative/status/migration-assistant.state/example1.json new file mode 100644 index 0000000..eeb9fe7 --- /dev/null +++ b/examples/declarative/status/migration-assistant.state/example1.json @@ -0,0 +1,5 @@ +{ + "migration-assistant": { + "state": "completed" + } +} diff --git a/examples/declarative/status/package.list/example1.json b/examples/declarative/status/package.list/example1.json new file mode 100644 index 0000000..0e2259e --- /dev/null +++ b/examples/declarative/status/package.list/example1.json @@ -0,0 +1,13 @@ +{ + "package": { + "list": [ + { + "identifier": "com.example.package.enterprise-tools", + "declaration-identifier": "com.example.package-management", + "name": "Enterprise Tools", + "version": "2.1.0", + "state": "installed" + } + ] + } +} diff --git a/examples/declarative/status/package.list/example2.json b/examples/declarative/status/package.list/example2.json new file mode 100644 index 0000000..d26b9f7 --- /dev/null +++ b/examples/declarative/status/package.list/example2.json @@ -0,0 +1,10 @@ +{ + "package": { + "list": [ + { + "identifier": "com.example.package.enterprise-tools", + "_removed": true + } + ] + } +} diff --git a/examples/declarative/status/passcode.is-compliant/example1.json b/examples/declarative/status/passcode.is-compliant/example1.json new file mode 100644 index 0000000..e7468db --- /dev/null +++ b/examples/declarative/status/passcode.is-compliant/example1.json @@ -0,0 +1,5 @@ +{ + "passcode": { + "is-compliant": true + } +} diff --git a/examples/declarative/status/passcode.is-present/example1.json b/examples/declarative/status/passcode.is-present/example1.json new file mode 100644 index 0000000..33f4806 --- /dev/null +++ b/examples/declarative/status/passcode.is-present/example1.json @@ -0,0 +1,5 @@ +{ + "passcode": { + "is-present": true + } +} diff --git a/examples/declarative/status/screensharing.connection.group.unresolved-connection/example1.json b/examples/declarative/status/screensharing.connection.group.unresolved-connection/example1.json new file mode 100644 index 0000000..a4048fa --- /dev/null +++ b/examples/declarative/status/screensharing.connection.group.unresolved-connection/example1.json @@ -0,0 +1,16 @@ +{ + "screensharing": { + "connection": { + "group": { + "unresolved-connection": [ + { + "identifier": "D4E5F6A7-B8C9-0123-DEFA-123456789012", + "unresolved_connections": [ + "E5F6A7B8-C9D0-1234-EFAB-234567890123" + ] + } + ] + } + } + } +} diff --git a/examples/declarative/status/screensharing.connection.group.unresolved-connection/example2.json b/examples/declarative/status/screensharing.connection.group.unresolved-connection/example2.json new file mode 100644 index 0000000..9011d12 --- /dev/null +++ b/examples/declarative/status/screensharing.connection.group.unresolved-connection/example2.json @@ -0,0 +1,14 @@ +{ + "screensharing": { + "connection": { + "group": { + "unresolved-connection": [ + { + "identifier": "D4E5F6A7-B8C9-0123-DEFA-123456789012", + "_removed": true + } + ] + } + } + } +} diff --git a/examples/declarative/status/security.certificate.list/example1.json b/examples/declarative/status/security.certificate.list/example1.json new file mode 100644 index 0000000..045a024 --- /dev/null +++ b/examples/declarative/status/security.certificate.list/example1.json @@ -0,0 +1,15 @@ +{ + "security": { + "certificate": { + "list": [ + { + "identifier": "F6A7B8C9-D0E1-2345-FABC-345678901234", + "declaration-identifier": "com.example.certificate", + "subject-summary": "Example Corp Root CA", + "is-identity": false, + "data": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA..." + } + ] + } + } +} diff --git a/examples/declarative/status/security.certificate.list/example2.json b/examples/declarative/status/security.certificate.list/example2.json new file mode 100644 index 0000000..65a6638 --- /dev/null +++ b/examples/declarative/status/security.certificate.list/example2.json @@ -0,0 +1,12 @@ +{ + "security": { + "certificate": { + "list": [ + { + "identifier": "F6A7B8C9-D0E1-2345-FABC-345678901234", + "_removed": true + } + ] + } + } +} diff --git a/examples/declarative/status/security.lockdown-mode/example1.json b/examples/declarative/status/security.lockdown-mode/example1.json new file mode 100644 index 0000000..dcea425 --- /dev/null +++ b/examples/declarative/status/security.lockdown-mode/example1.json @@ -0,0 +1,5 @@ +{ + "security": { + "lockdown-mode": false + } +} diff --git a/examples/declarative/status/services.background-task/example1.json b/examples/declarative/status/services.background-task/example1.json new file mode 100644 index 0000000..dfb68ce --- /dev/null +++ b/examples/declarative/status/services.background-task/example1.json @@ -0,0 +1,23 @@ +{ + "services": { + "background-task": [ + { + "identifier": "A1B2C3D4-E5F6-7890-ABCD-EF1234567890", + "uid": 501, + "path": "/Library/LaunchDaemons/com.example.daemon.plist", + "state": "enabled", + "type": "daemon", + "launchd": { + "label": "com.example.daemon", + "program": "/usr/local/bin/example-daemon", + "program-arguments": [ + "/usr/local/bin/example-daemon", + "--config", + "/etc/example/config.json" + ], + "checksum": "a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6" + } + } + ] + } +} diff --git a/examples/declarative/status/services.background-task/example2.json b/examples/declarative/status/services.background-task/example2.json new file mode 100644 index 0000000..d706581 --- /dev/null +++ b/examples/declarative/status/services.background-task/example2.json @@ -0,0 +1,10 @@ +{ + "services": { + "background-task": [ + { + "identifier": "A1B2C3D4-E5F6-7890-ABCD-EF1234567890", + "_removed": true + } + ] + } +} diff --git a/examples/declarative/status/softwareupdate.beta-enrollment/example1.json b/examples/declarative/status/softwareupdate.beta-enrollment/example1.json new file mode 100644 index 0000000..1982012 --- /dev/null +++ b/examples/declarative/status/softwareupdate.beta-enrollment/example1.json @@ -0,0 +1,5 @@ +{ + "softwareupdate": { + "beta-enrollment": "" + } +} diff --git a/examples/declarative/status/softwareupdate.device-id/example1.json b/examples/declarative/status/softwareupdate.device-id/example1.json new file mode 100644 index 0000000..51f33e7 --- /dev/null +++ b/examples/declarative/status/softwareupdate.device-id/example1.json @@ -0,0 +1,5 @@ +{ + "softwareupdate": { + "device-id": "iPhone14,3" + } +} diff --git a/examples/declarative/status/softwareupdate.failure-reason/example1.json b/examples/declarative/status/softwareupdate.failure-reason/example1.json new file mode 100644 index 0000000..ac796ad --- /dev/null +++ b/examples/declarative/status/softwareupdate.failure-reason/example1.json @@ -0,0 +1,7 @@ +{ + "softwareupdate": { + "failure-reason": { + "count": 0 + } + } +} diff --git a/examples/declarative/status/softwareupdate.install-reason/example1.json b/examples/declarative/status/softwareupdate.install-reason/example1.json new file mode 100644 index 0000000..9459c1b --- /dev/null +++ b/examples/declarative/status/softwareupdate.install-reason/example1.json @@ -0,0 +1,10 @@ +{ + "softwareupdate": { + "install-reason": { + "reason": [ + "declaration" + ], + "declaration-id": "com.example.softwareupdate-config" + } + } +} diff --git a/examples/declarative/status/softwareupdate.install-state/example1.json b/examples/declarative/status/softwareupdate.install-state/example1.json new file mode 100644 index 0000000..67b5cb9 --- /dev/null +++ b/examples/declarative/status/softwareupdate.install-state/example1.json @@ -0,0 +1,5 @@ +{ + "softwareupdate": { + "install-state": "none" + } +} diff --git a/examples/declarative/status/softwareupdate.pending-version/example1.json b/examples/declarative/status/softwareupdate.pending-version/example1.json new file mode 100644 index 0000000..60bbd81 --- /dev/null +++ b/examples/declarative/status/softwareupdate.pending-version/example1.json @@ -0,0 +1,8 @@ +{ + "softwareupdate": { + "pending-version": { + "os-version": "27.1", + "build-version": "24B32" + } + } +} diff --git a/examples/declarative/status/statusreason/example1.json b/examples/declarative/status/statusreason/example1.json new file mode 100644 index 0000000..3c745ec --- /dev/null +++ b/examples/declarative/status/statusreason/example1.json @@ -0,0 +1,7 @@ +{ + "code": "Error.InstallFailed", + "description": "The app installation failed.", + "details": { + "Timestamp": "2025-05-15T10:30:00Z" + } +} diff --git a/examples/declarative/status/test.array-value/example1.json b/examples/declarative/status/test.array-value/example1.json new file mode 100644 index 0000000..9e2ea9f --- /dev/null +++ b/examples/declarative/status/test.array-value/example1.json @@ -0,0 +1,10 @@ +{ + "test": { + "array-value": [ + { + "key1": "test-value-1", + "key2": "test-value-2" + } + ] + } +} diff --git a/examples/declarative/status/test.boolean-value/example1.json b/examples/declarative/status/test.boolean-value/example1.json new file mode 100644 index 0000000..ecafdfc --- /dev/null +++ b/examples/declarative/status/test.boolean-value/example1.json @@ -0,0 +1,5 @@ +{ + "test": { + "boolean-value": true + } +} diff --git a/examples/declarative/status/test.dictionary-value/example1.json b/examples/declarative/status/test.dictionary-value/example1.json new file mode 100644 index 0000000..7305570 --- /dev/null +++ b/examples/declarative/status/test.dictionary-value/example1.json @@ -0,0 +1,8 @@ +{ + "test": { + "dictionary-value": { + "key1": "test-value-1", + "key2": "test-value-2" + } + } +} diff --git a/examples/declarative/status/test.error-value/example1.json b/examples/declarative/status/test.error-value/example1.json new file mode 100644 index 0000000..c663d77 --- /dev/null +++ b/examples/declarative/status/test.error-value/example1.json @@ -0,0 +1,5 @@ +{ + "test": { + "error-value": "error-value" + } +} diff --git a/examples/declarative/status/test.integer-value/example1.json b/examples/declarative/status/test.integer-value/example1.json new file mode 100644 index 0000000..1ce2bb2 --- /dev/null +++ b/examples/declarative/status/test.integer-value/example1.json @@ -0,0 +1,5 @@ +{ + "test": { + "integer-value": 42 + } +} diff --git a/examples/declarative/status/test.real-value/example1.json b/examples/declarative/status/test.real-value/example1.json new file mode 100644 index 0000000..84ad183 --- /dev/null +++ b/examples/declarative/status/test.real-value/example1.json @@ -0,0 +1,5 @@ +{ + "test": { + "real-value": 3.14 + } +} diff --git a/examples/declarative/status/test.string-value/example1.json b/examples/declarative/status/test.string-value/example1.json new file mode 100644 index 0000000..6ed005a --- /dev/null +++ b/examples/declarative/status/test.string-value/example1.json @@ -0,0 +1,5 @@ +{ + "test": { + "string-value": "example-string-value" + } +} diff --git a/examples/mdm/profiles/com.apple.system.logging/example1.plist b/examples/mdm/profiles/com.apple.system.logging/example1.plist new file mode 100644 index 0000000..3c75a72 --- /dev/null +++ b/examples/mdm/profiles/com.apple.system.logging/example1.plist @@ -0,0 +1,45 @@ + + + + + PayloadContent + + + Subsystems + + com.example.app + + DEFAULT-OPTIONS + + Level + + Enable + Info + + Default-Privacy-Setting + Public + + + + PayloadIdentifier + com.example.mysystemloggingpayload + PayloadType + com.apple.system.logging + PayloadUUID + 0ff59613-35e9-495c-88c8-01963de4ac80 + PayloadVersion + 1 + + + PayloadDisplayName + System Logging + PayloadIdentifier + com.example.myprofile + PayloadType + Configuration + PayloadUUID + 0fbfa83e-c8ec-49d0-b50c-3acc3c05749c + PayloadVersion + 1 + + \ No newline at end of file diff --git a/mdm/profiles/com.apple.applicationaccess.yaml b/mdm/profiles/com.apple.applicationaccess.yaml index 6a5af1e..c503cae 100644 --- a/mdm/profiles/com.apple.applicationaccess.yaml +++ b/mdm/profiles/com.apple.applicationaccess.yaml @@ -3874,6 +3874,8 @@ payloadkeys: iOS: introduced: '26.0' supervised: true + sharedipad: + mode: forbidden userenrollment: mode: forbidden macOS: @@ -3899,6 +3901,8 @@ payloadkeys: iOS: introduced: '26.0' supervised: true + sharedipad: + mode: forbidden userenrollment: mode: forbidden macOS: diff --git a/mdm/profiles/com.apple.education.yaml b/mdm/profiles/com.apple.education.yaml index 4f3ab1f..a6e7826 100644 --- a/mdm/profiles/com.apple.education.yaml +++ b/mdm/profiles/com.apple.education.yaml @@ -319,7 +319,7 @@ notes: - You configure all certificates to use a hashing algorithm of SHA256 or stronger - You configure leader certificates to have the common name prefix "leader", which is case-insensitive - You configure member certificates to have the common name prefix "member", which is case-insensitive - - You configure TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC to have a validity period greater than 398 days; see [About Upcoming Limits on Trusted Certificates](https://support.apple.com/en-us/HT211025) for more information. + - You configure TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC to have a validity period less than 398 days; see [About Upcoming Limits on Trusted Certificates](https://support.apple.com/en-us/HT211025) for more information. examples: - title: Profile example files: diff --git a/mdm/profiles/com.apple.extensiblesso.yaml b/mdm/profiles/com.apple.extensiblesso.yaml index 8f585b1..cd8a1e1 100644 --- a/mdm/profiles/com.apple.extensiblesso.yaml +++ b/mdm/profiles/com.apple.extensiblesso.yaml @@ -393,15 +393,15 @@ payloadkeys: type: presence: optional content: |- - The policy to apply when using Platform SSO at FileVault unlock on a Mac with Apple silicon. Applies when `AuthenticationMethod` is `Password`. + The policy to apply when using Platform SSO at FileVault unlock on a Mac with Apple silicon. - * `AttemptAuthentication`: The device attempts Platform SSO authentication before proceeding. If offline, unlock continues if the local account password matches. If online and the credential is incorrect, then the device requires a successful Platform SSO authentication, even if taken offline. - * `RequireAuthentication`: The device requires Platform SSO authentication before proceeding. If the device is offline and `AllowOfflineGracePeriod` is enabled, then the device uses the offline `OfflineGracePeriod` to determine if the user can proceed or not. If online and the credential is incorrect, then the device requires a valid Platform SSO authentication to proceed, regardless of the `OfflineGracePeriod`. If the account isn't registered for Platform SSO and `AllowAuthenticationGracePeriod` is enabled, then the device uses `AuthenticationGracePeriod` to determine if the user can proceed or not. - * `AllowOfflineGracePeriod`: The device allows the use of the `OfflineGracePeriod` when `RequireAuthentication` is enabled. If `AllowOfflineGracePeriod` isn't set, then the device denies offline access. - * `AllowAuthenticationGracePeriod`: The device allows the use of the `AuthenticationGracePeriod` for other local accounts when `RequireAuthentication` is enabled. The `AuthenticationGracePeriod` starts when any of the policies are updated. If `AllowAuthenticationGracePeriod` isn't set, then the device denies unregistered account access. - * `RequireTouchID`: The device requires the use of Touch ID (and not Apple Watch) for File Vault unlock. Available in macOS 27 and later. - * `RequireTouchIDOrWatch`: The device requires the use of Touch ID or Apple Watch for File Vault unlock. Available in macOS 27 and later. - * `AllowOpenIDForTouchIDFallback`: The device allows web login as a fallback if touchID fails or isn't available. Available in macOS 27 and later. + * `AttemptAuthentication`: The device attempts Platform SSO authentication before proceeding. If offline, unlock continues if the local account password matches. If online and the credential is incorrect, then the device requires a successful Platform SSO authentication is required, even if taken offline. Only use when `AuthenticationMethod` is `Password`. + * `RequireAuthentication`: The device requires Platform SSO authentication before proceeding. If the device is offline and `AllowOfflineGracePeriod` is enabled, then the device uses the offline `OfflineGracePeriod` to determine if the user can proceed or not. If online and the credential is incorrect, then the device requires a valid Platform SSO authentication to proceed, regardless of the `OfflineGracePeriod`. If the account isn't registered for Platform SSO and `AllowAuthenticationGracePeriod` is enabled, then the device uses `AuthenticationGracePeriod` to determine if the user can proceed or not. Only use when `AuthenticationMethod` is `Password`. + * `AllowOfflineGracePeriod`: The device allows the use of the `OfflineGracePeriod`. If `AllowOfflineGracePeriod` isn't set, then the device denies offline access. Only use when `AuthenticationMethod` is `Password` and `RequireAuthentication` is enabled, or `AuthenticationMethod` is `OpenID`. + * `AllowAuthenticationGracePeriod`: The device allows the use of the `AuthenticationGracePeriod` for other local accounts when `RequireAuthentication` is enabled. The `AuthenticationGracePeriod` starts when any of the policies are updated. If `AllowAuthenticationGracePeriod` isn't set, then the device denies unregistered account access. Only use when `AuthenticationMethod` is `Password`. + * `RequireTouchID`: The device requires the use of Touch ID (and not Apple Watch) for FileVault unlock. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. + * `RequireTouchIDOrWatch`: The device requires the use of Touch ID or Apple Watch for FileVault unlock. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. + * `AllowOpenIDForTouchIDFallback`: The device allows web login as a fallback if Touch ID fails or isn't available. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. subkeys: - key: policy type: @@ -422,15 +422,15 @@ payloadkeys: type: presence: optional content: |- - The policy to apply when using Platform SSO at the Login Window. Applies when `AuthenticationMethod` is `Password`. + The policy to apply when using Platform SSO at the Login Window. - * `AttemptAuthentication`: The device attempts Platform SSO authentication before proceeding. If offline, login continues if the local account password matches. If online and the credential is incorrect, then the device requires a successful Platform SSO authentication to proceed, even if taken offline. - * `RequireAuthentication`: The device requires Platform SSO authentication before proceeding. If the device is offline and `AllowOfflineGracePeriod` is enabled, then the device uses the offline `OfflineGracePeriod` to determine if the user can proceed or not. If online and the credential is incorrect, then the device requires a valid Platform SSO authentication to proceed, regardless of the `OfflineGracePeriod`. If the account isn't registered for Platform SSO and `AllowAuthenticationGracePeriod` is enabled, then the device uses the `AuthenticationGracePeriod` to determine if the user can proceed or not. - * `AllowOfflineGracePeriod`: The device allows the use of the `OfflineGracePeriod` when `RequireAuthentication` is enabled. If `AllowOfflineGracePeriod` isn't set, then the device denies offline access. Applies to web login and all offline passwords. - * `AllowAuthenticationGracePeriod`: The device allows the use of the `AuthenticationGracePeriod` for other local accounts when `RequireAuthentication` is enabled. The `AuthenticationGracePeriod` starts when any of the policies have been updated. If `AllowAuthenticationGracePeriod` isn't set, then the device denies unregistered account access. - * `RequireTouchID`: The device requires the use of Touch ID (and not Apple Watch) for login. Available in macOS 27 and later. - * `RequireTouchIDOrWatch`: The device requires the use of Touch ID or Apple Watch for login. Available in macOS 27 and later. - * `AllowOpenIDForTouchIDFallback`: The device allows web login as fallback if touchID fails or isn't available. Available in macOS 27 and later. + * `AttemptAuthentication`: The device attempts Platform SSO authentication before proceeding. If offline, login continues if the local account password matches. If online and the credential is incorrect, then the device requires a successful Platform SSO authentication to proceed, even if taken offline. Only use when `AuthenticationMethod` is `Password`. + * `RequireAuthentication`: The device requires Platform SSO authentication before proceeding. If the device is offline and `AllowOfflineGracePeriod` is enabled, then the device uses the offline `OfflineGracePeriod` to determine if the user can proceed or not. If online and the credential is incorrect, then the device requires a valid Platform SSO authentication to proceed, regardless of the `OfflineGracePeriod`. If the account isn't registered for Platform SSO and `AllowAuthenticationGracePeriod` is enabled, then the device uses the `AuthenticationGracePeriod` to determine if the user can proceed or not. Only use when `AuthenticationMethod` is `Password`. + * `AllowOfflineGracePeriod`: The device allows the use of the `OfflineGracePeriod`. If `AllowOfflineGracePeriod` isn't set, then the device denies offline access. Only use when `AuthenticationMethod` is `Password` and `RequireAuthentication` is enabled, or `AuthenticationMethod` is `OpenID`. + * `AllowAuthenticationGracePeriod`: The device allows the use of the `AuthenticationGracePeriod` for other local accounts when `RequireAuthentication` is enabled. The `AuthenticationGracePeriod` starts when any of the policies have been updated. If `AllowAuthenticationGracePeriod` isn't set, then the device denies unregistered account access. Only use when `AuthenticationMethod` is `Password`. + * `RequireTouchID`: The device requires the use of Touch ID (and not Apple Watch) for login. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. + * `RequireTouchIDOrWatch`: The device requires the use of Touch ID or Apple Watch for login. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. + * `AllowOpenIDForTouchIDFallback`: The device allows web login as fallback if Touch ID fails or isn't available. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. subkeys: - key: policy type: @@ -451,16 +451,16 @@ payloadkeys: type: presence: optional content: |- - The policy to apply when using Platform SSO at screensaver unlock. Applies when `AuthenticationMethod` is `Password`. + The policy to apply when using Platform SSO at screensaver unlock. - * `AttemptAuthentication`: The device attempts Platform SSO authentication before proceeding. If offline, unlock will continue if the local account password matches. If online and the credential is incorrect, then the device requires a successful Platform SSO authentication to proceed, even if taken offline. - * `RequireAuthentication`: The device requires Platform SSO authentication before proceeding. If the device is offline and `AllowOfflineGracePeriod` is enabled, then the device uses the offline `OfflineGracePeriod` to determine if the user can proceed or not. If online and the credential is incorrect, then the device requires a valid Platform SSO authentication to proceed regardless of the `OfflineGracePeriod`. If the account isn't registered for Platform SSO and `AllowAuthenticationGracePeriod` is enabled, then the device uses `AuthenticationGracePeriod` to determine if the user can proceed or not. - * `AllowOfflineGracePeriod`: The device allows the use of the `OfflineGracePeriod` when `RequireAuthentication` is enabled. If `AllowOfflineGracePeriod` isn't set, then the device denies offline access. - * `AllowAuthenticationGracePeriod`: The device allows the use of the `AuthenticationGracePeriod` for other local accounts when `RequireAuthentication` is enabled. The `AuthenticationGracePeriod` starts when any of the policies have been updated. If `AllowAuthenticationGracePeriod` isn't set, then the device denies the unregistered account access. - * `AllowTouchIDOrWatchForUnlock`: The device allows TouchID or Watch to unlock the screensaver instead of Platform SSO authentication when `RequireAuthentication` is enabled. - * `RequireTouchID`: The device requires the use of Touch ID (and not Apple Watch) for unlock. Available in macOS 27 and later. - * `RequireTouchIDOrWatch`: RThe device requires the use of Touch ID or Apple Watch for unlock. Available in macOS 27 and later. - * `AllowOpenIDForTouchIDFallback`: The device allows web login as fallback if touchID fails or isn't available. Available in macOS 27 and later. + * `AttemptAuthentication`: The device attempts Platform SSO authentication before proceeding. If offline, unlock will continue if the local account password matches. If online and the credential is incorrect, then the device requires a successful Platform SSO authentication to proceed, even if taken offline. Only use when `AuthenticationMethod` is `Password`. + * `RequireAuthentication`: The device requires Platform SSO authentication before proceeding. If the device is offline and `AllowOfflineGracePeriod` is enabled, then the offline `OfflineGracePeriod` is used to determine if the user can proceed or not. If online and the credential is incorrect, then the device requires a valid Platform SSO authentication to proceed regardless of the `OfflineGracePeriod`. If the account isn't registered for Platform SSO and `AllowAuthenticationGracePeriod` is enabled, then the device uses `AuthenticationGracePeriod` to determine if the user can proceed or not. Only use when `AuthenticationMethod` is `Password`. + * `AllowOfflineGracePeriod`: The device allows the use of the `OfflineGracePeriod`. If `AllowOfflineGracePeriod` isn't set, then the device denies offline access. Only use when `AuthenticationMethod` is `Password` and `RequireAuthentication` is enabled, or `AuthenticationMethod` is `OpenID`. + * `AllowAuthenticationGracePeriod`: The device allows the use of the `AuthenticationGracePeriod` for other local accounts when `RequireAuthentication` is enabled. The `AuthenticationGracePeriod` starts when any of the policies have been updated. If `AllowAuthenticationGracePeriod` isn't set, then the device denies the unregistered account access. Only use when `AuthenticationMethod` is `Password`. + * `AllowTouchIDOrWatchForUnlock`: The device allows Touch ID or Apple Watch to unlock the screensaver instead of Platform SSO authentication when `RequireAuthentication` is enabled. Only use when `AuthenticationMethod` is `Password`. + * `RequireTouchID`: The device requires the use of Touch ID (and not Apple Watch) for unlock. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. + * `RequireTouchIDOrWatch`: The device requires the use of Touch ID or Apple Watch for unlock. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. + * `AllowOpenIDForTouchIDFallback`: The device allows web login as fallback if Touch ID fails or isn't available. Only use when `AuthenticationMethod` is `Password` or `UserSecureEnclaveKey`. subkeys: - key: policy type: @@ -481,17 +481,17 @@ payloadkeys: introduced: '15.0' type: presence: optional - content: The amount of time after the last successful Platform SSO login for using - a local account password offline. Required when setting `AllowOfflineGracePeriod`. + content: The amount of time (in seconds) after the last successful Platform SSO + login for using a local account password offline. Required when setting `AllowOfflineGracePeriod`. - key: AuthenticationGracePeriod supportedOS: macOS: introduced: '15.0' type: presence: optional - content: The amount of time after receiving or updating a `FileVaultPolicy`, `LoginPolicy`, - or `UnlockPolicy` that the system can use unregistered local accounts. Required - when `AllowAuthenticationGracePeriod` is set. + content: The amount of time (in seconds) after receiving or updating a `FileVaultPolicy`, + `LoginPolicy`, or `UnlockPolicy` that the system can use unregistered local + accounts. Required when `AllowAuthenticationGracePeriod` is set. - key: NonPlatformSSOAccounts supportedOS: macOS: diff --git a/mdm/profiles/com.apple.system.logging.yaml b/mdm/profiles/com.apple.system.logging.yaml new file mode 100644 index 0000000..f315239 --- /dev/null +++ b/mdm/profiles/com.apple.system.logging.yaml @@ -0,0 +1,53 @@ +title: System Logging +description: The payload that configures system logging. +payload: + payloadtype: com.apple.system.logging + supportedOS: + iOS: + introduced: n/a + macOS: + introduced: '10.12' + multiple: true + devicechannel: true + userchannel: true + supervised: false + requiresdep: false + userapprovedmdm: false + allowmanualinstall: true + userenrollment: + mode: forbidden + tvOS: + introduced: n/a + visionOS: + introduced: n/a + watchOS: + introduced: n/a +payloadkeys: +- key: Subsystems + supportedOS: + macOS: + introduced: n/a + type: + presence: optional + content: A dictionary enabling the logging level for subsystems. See `Customizing + Logging Behavior While Debugging` for more details about the format of the dictionary. + subkeytype: Item + subkeys: &id001 + - key: ANY + type: + presence: optional + content: TBD +- key: System + supportedOS: + macOS: + introduced: n/a + type: + presence: optional + content: This dictionary has one key, `Enable-Private-Data`. Setting that value + to `true` enables private data logging for the entire system. + subkeytype: Item + subkeys: *id001 +examples: +- title: Profile example + files: + - file: examples/mdm/profiles/com.apple.system.logging/example1.plist diff --git a/other/machineinfo.yaml b/other/machineinfo.yaml index a1165b4..fc2a07a 100644 --- a/other/machineinfo.yaml +++ b/other/machineinfo.yaml @@ -141,7 +141,7 @@ payloadkeys: tvOS: introduced: n/a visionOS: - introduced: n/a + introduced: '26.0' watchOS: introduced: n/a type: diff --git a/other/skipkeys.yaml b/other/skipkeys.yaml index 423c3fa..8f94bb3 100644 --- a/other/skipkeys.yaml +++ b/other/skipkeys.yaml @@ -42,6 +42,7 @@ payloadkeys: supportedOS: iOS: introduced: '17.0' + always-skippable: false macOS: introduced: n/a tvOS: @@ -50,7 +51,9 @@ payloadkeys: introduced: n/a type: presence: optional - content: The key to skip the Accessibility Appearance configuration pane. + content: The key to skip the Accessibility Appearance configuration pane. This pane + isn't always skippable because it appears before the device retrieves the Cloud + Configuration from the server. - key: ActionButton title: Skip Action Button setup pane supportedOS: