Release_iOS-17-2_macOS-14-2

declarative/declarations/configurations/account.exchange.yaml

@@ -156,8 +156,8 @@ payloadkeys:
   - com.apple.asset.credential.identity
   - com.apple.asset.credential.scep
   presence: optional
-  content: Specifies the identifier of a credential asset declaration that contains
-    the identity that this account requires to authenticate with the Exchange server.
+  content: The identifier of a credential asset declaration that contains the identity
+    that this account requires to authenticate with the Exchange server.
 - key: SMIME
   title: S/MIME Settings
   supportedOS:
@@ -254,7 +254,7 @@ payloadkeys:
   type: <boolean>
   presence: optional
   default: true
-  content: If 'true', activates the mail service for this account.
+  content: If 'true', the system activates the mail service for this account.
 - key: LockMailService
   supportedOS:
     macOS:
@@ -262,8 +262,8 @@ payloadkeys:
   type: <boolean>
   presence: optional
   default: false
-  content: If 'true', prevents the user from changing the status of the mail service
-    for this account.
+  content: If 'true', the system prevents the user from changing the status of the
+    mail service for this account.
 - key: ContactsServiceActive
   supportedOS:
     macOS:
@@ -279,8 +279,8 @@ payloadkeys:
   type: <boolean>
   presence: optional
   default: false
-  content: If 'true', prevents the user from changing the status of the address book
-    service for this account.
+  content: If 'true', the system prevents the user from changing the status of the
+    address book service for this account.
 - key: CalendarServiceActive
   supportedOS:
     macOS:
@@ -296,8 +296,8 @@ payloadkeys:
   type: <boolean>
   presence: optional
   default: false
-  content: If 'true', prevents the user from changing the status of the calendar service
-    for this account.
+  content: If 'true', the system prevents the user from changing the status of the
+    calendar service for this account.
 - key: RemindersServiceActive
   supportedOS:
     macOS:
@@ -305,7 +305,7 @@ payloadkeys:
   type: <boolean>
   presence: optional
   default: true
-  content: If 'true', activates the reminders service for this account.
+  content: If 'true', the system activates the reminders service for this account.
 - key: LockRemindersService
   supportedOS:
     macOS:
@@ -313,8 +313,8 @@ payloadkeys:
   type: <boolean>
   presence: optional
   default: false
-  content: If 'true', prevents the user from changing the status of the reminders
-    service for this account.
+  content: If 'true', the system prevents the user from changing the status of the
+    reminders service for this account.
 - key: NotesServiceActive
   supportedOS:
     macOS:
@@ -322,7 +322,7 @@ payloadkeys:
   type: <boolean>
   presence: optional
   default: true
-  content: If 'true', activates the notes service for this account.
+  content: If 'true', the system activates the notes service for this account.
 - key: LockNotesService
   supportedOS:
     macOS:
@@ -330,5 +330,5 @@ payloadkeys:
   type: <boolean>
   presence: optional
   default: false
-  content: If 'true', prevents the user from changing the status of the notes service
-    for this account.
+  content: If 'true', the system prevents the user from changing the status of the
+    notes service for this account.

declarative/declarations/configurations/app.managed.yaml

@@ -0,0 +1,148 @@
+title: App:Managed
+description: Use this configuration to define settings for a managed app.
+payload:
+  declarationtype: com.apple.configuration.app.managed
+  supportedOS:
+    iOS:
+      introduced: '17.2'
+      allowed-enrollments:
+      - device
+      - user
+      allowed-scopes:
+      - system
+      sharedipad:
+        allowed-scopes:
+        - system
+    macOS:
+      introduced: n/a
+    tvOS:
+      introduced: n/a
+    watchOS:
+      introduced: n/a
+  beta: true
+payloadkeys:
+- key: AppStoreID
+  title: App Store ID
+  type: <string>
+  presence: optional
+  content: Specifies the App Store ID of the managed app. One and only one of `AppStoreID`,
+    `BundleID`, or `ManifestURL` must be present.
+- key: BundleID
+  title: Bundle ID
+  type: <string>
+  presence: optional
+  content: Specifies the Bundle ID of the managed app. One and only one of `AppStoreID`,
+    `BundleID`, or `ManifestURL` must be present.
+- key: ManifestURL
+  title: Manifest URL
+  type: <string>
+  presence: optional
+  content: Specifies the URL of the manifest for the managed app. One and only one
+    of `AppStoreID`, `BundleID`, or `ManifestURL` must be present.
+- key: InstallBehavior
+  title: Install Behavior
+  type: <dictionary>
+  presence: optional
+  content: Describes how and when the app will be installed.
+  subkeys:
+  - key: Install
+    title: Install
+    type: <string>
+    presence: optional
+    rangelist:
+    - Optional
+    - Required
+    default: Optional
+    content: |-
+      Describes whether the app must remain on the device at all times, or if the user can freely install and remove it:
+      * Optional - the user can install and remove the app after the configuration is activated.
+      * Required - the app is installed when the configuration is activated. The user may not remove the app.
+      On supervised devices apps are installed automatically. Otherwise the device prompts the user to approve the install of the app.
+  - key: License
+    title: License
+    type: <dictionary>
+    presence: optional
+    content: Describes how the app is licensed.
+    subkeys:
+    - key: VPPType
+      title: VPP Type
+      type: <string>
+      presence: optional
+      rangelist:
+      - Device
+      - User
+      content: |-
+        Indicates what type of VPP license is used for the app when installed via the App Store:
+        * Device - the app has a VPP device license.
+        * User - the app has a VPP user license.
+        This key must be present when an App Store app is being installed.
+- key: IncludeInBackup
+  title: Include in Backup
+  type: <boolean>
+  presence: optional
+  default: true
+  content: If `true`, backups will contain the app and its data. If `false`, backups
+    will not contain the app and its data.
+- key: Attributes
+  title: App Attributes
+  supportedOS:
+    macOS:
+      introduced: n/a
+  type: <dictionary>
+  presence: optional
+  content: A dictionary of values associated with the app.
+  subkeys:
+  - key: AssociatedDomains
+    title: Associated Domains
+    type: <array>
+    presence: optional
+    content: An array of domain names to associate with the app.
+    subkeys:
+    - key: Domain
+      title: Domain
+      type: <string>
+      presence: required
+      content: A domain to be associated with the app.
+  - key: AssociatedDomainsEnableDirectDownloads
+    title: Associated Domains Enable Direct Downloads
+    type: <boolean>
+    presence: optional
+    default: false
+    content: If `true`, direct downloads will be enabled for associated domains.
+  - key: CellularSliceUUID
+    title: Cellular Slice UUID
+    type: <string>
+    presence: optional
+    content: Either data network name (DNN) or traffic category can be set as the
+      enterprise slice identifier. For DNN, the value must be encoded as "DNN:name”,
+      where "name" is the carrier provided DNN name. For app category, the value must
+      be encoded as "AppCategory:category", where "category" is a carrier provided
+      string like "Enterprise1".
+  - key: ContentFilterUUID
+    title: Content Filter UUID
+    type: <string>
+    presence: optional
+    content: The UUID of the content filter to associate with the app.
+  - key: DNSProxyUUID
+    title: DNS Proxy UUID
+    type: <string>
+    presence: optional
+    content: The UUID of the DNS proxy to associate with the app.
+  - key: RelayUUID
+    title: Relay UUID
+    type: <string>
+    presence: optional
+    content: The UUID of the Relay to associated with the app.
+  - key: TapToPayScreenLock
+    title: Tap to Pay Screen Lock
+    type: <boolean>
+    presence: optional
+    default: false
+    content: If `true`, the device will automatically lock after every transaction
+      that requires a customer's card PIN. If `false`, the user of the device may
+      choose the behavior they prefer.
+  - key: VPNUUID
+    title: VPN UUID
+    type: <string>
+    presence: optional
+    content: The UUID of the VPN to associate with the app.

declarative/declarations/configurations/passcode.settings.yaml

@@ -36,7 +36,7 @@ payloadkeys:
   type: <boolean>
   presence: optional
   default: false
-  content: If 'true', requires the user to set a passcode without any requirements
+  content: If 'true', the system requires the user to set a passcode without any requirements
     about the length or quality of the passcode. The presence of any other keys implicitly
     requires a passcode, and overrides this key's value.
 - key: RequireAlphanumericPasscode
@@ -58,9 +58,9 @@ payloadkeys:
   type: <boolean>
   presence: optional
   default: false
-  content: If 'true', requires a complex passcode. A complex passcode is one that
-    doesn't contain repeated characters or increasing or decreasing characters (such
-    as 123 or CBA).
+  content: If 'true', the system requires a complex passcode. A complex passcode is
+    one that doesn't contain repeated characters or increasing or decreasing characters
+    (such as 123 or CBA).
 - key: MinimumLength
   title: Minimum Passcode Length
   type: <integer>
@@ -117,9 +117,10 @@ payloadkeys:
   title: Maximum Grace Period
   type: <integer>
   presence: optional
-  content: |-
-    The maximum period that a user can select, during which the user can unlock the device without a passcode. A value of '0' means no grace period, and the device requires a passcode immediately. In the absence of this key, the user can select any period.
-    macOS translates this to screensaver settings.
+  content: The maximum period that a user can select, during which the user can unlock
+    the device without a passcode. A value of '0' means no grace period, and the device
+    requires a passcode immediately. In the absence of this key, the user can select
+    any period. In macOS, the system translates this to screensaver settings.
 - key: MaximumInactivityInMinutes
   title: Automatic Device Lock
   type: <integer>
@@ -127,9 +128,11 @@ payloadkeys:
   range:
     min: 0
     max: 15
-  content: |-
-    The maximum period that a user can select, during which the device can be idle before the system automatically locks it. When the device reaches this limit, the device locks and the user must enter the passcode to unlock it. In the absence of this key, the user can select any period.
-    macOS translates this to screensaver settings.
+  content: The maximum period that a user can select, during which the device can
+    be idle before the system automatically locks it. When the device reaches this
+    limit, the device locks and the user must enter the passcode to unlock it. In
+    the absence of this key, the user can select any period. In macOS, the system
+    translates this to screensaver settings.
 - key: MaximumPasscodeAgeInDays
   title: Maximum Passcode Age
   supportedOS:

declarative/declarations/configurations/screensharing.connection.yaml

@@ -38,7 +38,7 @@ payloadkeys:
   title: TCP Port
   type: <integer>
   presence: optional
-  content: Specifies the TCP port number on the host to initiate the connection.
+  content: The TCP port number on the host to initiate the connection.
 - key: DisplayConfiguration
   title: Display Configuration
   type: <dictionary>
@@ -53,6 +53,7 @@ payloadkeys:
     - Virtual2
     content: |-
       The type of display for the connection, which has these allowed values:
+
       * 'Virtual1': Create one virtual display.
       * 'Virtual2': Create two virtual displays.
 - key: AuthenticationCredentialsAssetReference
@@ -61,6 +62,6 @@ payloadkeys:
   assettypes:
   - com.apple.asset.credential.userpassword
   presence: optional
-  content: Specifies the identifier of an asset declaration that contains the required
-    credentials for this connection to authenticate with the screen-sharing server.
-    Set the corresponding asset type to 'com.apple.asset.credential.userpassword'.
+  content: The identifier of an asset declaration that contains the required credentials
+    for this connection to authenticate with the screen-sharing server. Set the corresponding
+    asset type to 'com.apple.asset.credential.userpassword'.

declarative/declarations/configurations/security.certificate.yaml

@@ -45,5 +45,5 @@ payloadkeys:
   assettypes:
   - com.apple.asset.credential.certificate
   presence: required
-  content: Specifies the identifier of an asset declaration that contains the certificate
-    to install.
+  content: The identifier of an asset declaration that contains the certificate to
+    install.

declarative/declarations/configurations/security.identity.yaml

@@ -47,8 +47,7 @@ payloadkeys:
   - com.apple.asset.credential.scep
   - com.apple.asset.credential.acme
   presence: required
-  content: Specifies the identifier of an asset declaration that contains the identity
-    to install.
+  content: The identifier of an asset declaration that contains the identity to install.
 - key: AllowAllAppsAccess
   title: Allow all apps access
   supportedOS:

declarative/declarations/configurations/security.passkey.attestation.yaml

@@ -31,8 +31,8 @@ payloadkeys:
   - com.apple.asset.credential.scep
   - com.apple.asset.credential.acme
   presence: required
-  content: Specifies the identifier of an asset declaration that contains the identity
-    to install and use for passkey attestation.
+  content: The identifier of an asset declaration that contains the identity to install
+    and use for passkey attestation.
 - key: AttestationIdentityKeyIsExtractable
   title: Attestation identity key is extractable
   supportedOS:
@@ -47,7 +47,7 @@ payloadkeys:
   title: Relying parties
   type: <array>
   presence: required
-  content: Relying parties to allow enterprise attestation.
+  content: An array of the relying parties to allow enterprise attestation.
   subkeys:
   - key: RelyingParty
     title: Relying party

declarative/declarations/configurations/services.configuration-files.yaml

@@ -21,9 +21,7 @@ payloadkeys:
   type: <string>
   presence: required
   content: |-
-    The identifier of the system service with managed configuration files.
-    Use a reverse DNS style for this identifier. However, the system reserves 'com.apple.' prefix for built-in services.
-    The available built-in services are:
+    The identifier of the system service with managed configuration files. Use a reverse DNS style for this identifier. However, the system reserves 'com.apple.' prefix for built-in services. The available built-in services are:
     * 'com.apple.sshd' configures sshd
     * 'com.apple.sudo' configures sudo
     * 'com.apple.pam' configures PAM
@@ -38,8 +36,10 @@ payloadkeys:
   - com.apple.asset.data
   presence: required
   content: |-
-    Specifies the identifier of an asset declaration that contains a reference to the files to use for system service configuration. Ensure that the corresponding asset:
+    The identifier of an asset declaration that contains a reference to the files to use for system service configuration. Ensure that the corresponding asset:
+
     * Is of type 'com.apple.asset.data'
     * Is a zip archive of an entire directory
     * Has a 'Reference' key that includes the 'ContentType' and 'Hash-SHA-256' keys, which the system requires
+
     The system expands the zip archive and stores the data in a well-known location for the service.

declarative/declarations/configurations/softwareupdate.enforcement.specific.yaml

@@ -28,8 +28,7 @@ payloadkeys:
   type: <string>
   presence: required
   content: The target OS version to update the device to by the appropriate time.
-    This is the OS version number, for example, '16.1'. It may also include a supplemental
-    version identifier, for example, '16.1.1'.
+    This is the OS version number, for example, '16.1'.
 - key: TargetBuildVersion
   title: Target Build Version
   type: <string>

declarative/declarations/configurations/watch.enrollment.yaml

@@ -33,9 +33,9 @@ payloadkeys:
   assettypes:
   - com.apple.asset.credential.certificate
   presence: optional
-  content: Specifies an array of identifiers of asset declarations that contain anchor
-    certificates to use to evaluate the trust of the enrollment profile server. Set
-    the type of the corresponding assets to 'com.apple.asset.credential.certificate'.
+  content: An array of identifiers of asset declarations that contain anchor certificates
+    to use to evaluate the trust of the enrollment profile server. Set the type of
+    the corresponding assets to 'com.apple.asset.credential.certificate'.
   subkeys:
   - key: AnchorCertificateAssetReferenceItem
     type: <string>