Files
apple-device-management-mdm/docs/errata.md
T
2024-10-21 14:54:30 -04:00

86 lines
4.0 KiB
Markdown

# Schema Errata
This document lists errata for the YAML schema. This is used when older versions of the schema are incorrect, and a fix was made in later schema to correct the problem.
## iOS 18.1 / macOS 15.1
### mdm/profiles/com.apple.applicationaccess.yaml
allowExplicitContent was incorrectly marked as supported on unsupervised devices for tvOS.
## iOS 18 / macOS 15
### tvOS
tvOS `introduced` values have been set to a minimum value of `9.0` to reflect the first version of tvOS itself, as opposed to earlier versions of the Apple TV Software.
### declarative/declarations/configurations/account.exchange.yaml
The `<service>Active` keys were incorrectly marked as unsupported on macOS.
### mdm/profiles/com.apple.ManagedClient.preferences.yaml
The `PayloadContent` key of the `com.apple.ManagedClient.preferences` profile
payload was incorrectly named `PreferenceDomain`; the key itself also represents
a dictionary of application preference domain identifiers to
`ManagedPreference.PreferenceDomain`s (rather than a single
`ManagedPreference.PreferenceDomain`).
### mdm/profiles/com.apple.cellularprivatenetwork.managed.yaml
iOS 17 supported multiple private network payloads, but the `multiple` key was set to false.
iOS 17 also mistakenly forbade multiple private network payloads in a single profile.
### mdm/checkin/authenticate.yaml
Starting in iOS 13 and macOS 10.15 UDID is optional because User Enrollments do not return UUIDs.
Starting is iOS 13 and macOS 10.15 Enrollment ID is optional because Device Enrollments only return UUIDs.
## iOS 17 / macOS 14
### mdm/profiles/com.apple.education.yaml
The `GroupBeaconIDs` key in the `DepartmentsItem` dictionary in the `com.apple.education` profile payload incorrectly listed its type as an array of `string`. The correct type is an array of `integer`.
### mdm/profiles/com.apple.vpn.managed.yaml
The `CertificateType` key in the `com.apple.vpn.managed` profile payload incorrectly listed `Ed25519` as a supported certificate type. That type was never supported and has now been removed.
The `PPTP` VPNType has not been supported since iOS 10 and macOS 10.12, see https://support.apple.com/en-us/HT206844. The `PPTP` VPNType has been removed.
There were a number of keys in the VPN dictionary that were implied to appear in other VPN types. These keys have now been explicitly added in all VPN types.
The `ActionParameters` key in the profile payload has always been an array of dictionaries.
### mdm/commands passcode.firmware.set.yaml passcode.firmware.verify.yaml
The response keys were incorrectly listed as being top-level keys in the response dictionary when in fact they were nested one-level deep.
### mdm/profiles/com.apple.vpn.managed.applayer.yaml
The `OnDemandMatchAppEnabled` key in the `com.apple.vpn.managed.applayer` profile payload incorrectly listed its type as `integer`. The correct type is `boolean`.
### mdm/profiles/com.apple.wifi.managed.yaml
The EAPClientConfiguration dictionary listed both OneTimePassword and OneTimeUserPassword as valid keys. The erroneous OneTimePassword key has been removed.
### mdm/profiles/com.apple.security.scep.yaml
The documentation indicated that all the keys in the SubjectAltName value could be either string or array types. The ntPrincipalName cannot be an array and must be a
string. This has been clarified in the description. Note that the type field for the rfc822Name, dNSName, and uniformResourceIdentifier still indicates these are
strings. This has not been corrected as the schema does not support polymorphic types.
### mdm/profiles/com.apple.universalaccess.yaml
The `contrast` key in the `com.apple.universalaccess` profile payload incorrectly listed its type as `integer`. The correct type is `real`.
### mdm/profiles/com.apple.extensiblesso.yaml
The `AuthorizationGroups` key was updated as the key values-pairs in the dictionary were incorrectly stated.
### mdm/profiles/com.apple.dnsSettings.managed
The `ActionParameters` key in the `com.apple.dnsSettings.managed` profile payload has always been an array of dictionaries.