Files
apple_device-management/mdm/profiles/com.apple.lom.yaml
T
2026-06-22 15:55:19 -04:00

72 lines
2.7 KiB
YAML

title: Lights Out Management (LOM)
description: The payload that configures lights-out management (LOM) settings.
payload:
payloadtype: com.apple.lom
supportedOS:
iOS:
introduced: n/a
macOS:
introduced: '11.0'
multiple: false
devicechannel: true
userchannel: false
requiresdep: false
userapprovedmdm: true
allowmanualinstall: false
userenrollment:
mode: forbidden
tvOS:
introduced: n/a
visionOS:
introduced: n/a
watchOS:
introduced: n/a
content: Configures a computer to send or receive "PowerON". "PowerOFF", "Reset"
requests.
payloadkeys:
- key: DeviceCertificateUUID
title: Device certificate payload UUID
type: <string>
presence: optional
content: The UUID certificate for the device. This key indicates the device can
receive `PowerON`, `PowerOFF`, and `Reset` requests from a LOM controller. This
certificate must contain the Key Usage attributes of Digital Signature, Key Encipherment
and Data Encipherment. As well as the Extended Key Usage attributes of Server
Authentication and Client Authentication.
- key: ControllerCertificateUUID
title: Controller certificate payload UUID
type: <string>
presence: optional
content: The UUID certificate for the LOM controller. This key configures the device
to accept the `LOMDeviceRequestCommand` from MDM and then send it to the target
device.
- key: DeviceCACertificateUUIDs
title: CA certificate payload UUIDs
type: <array>
presence: optional
content: An array of payload UUIDs containing CA certificates that controllers use
to evaluate trust of device certificates.
subkeys:
- key: DeviceCACertificateUUIDsItem
type: <string>
- key: ControllerCACertificateUUIDs
title: CA certificate payload UUIDs
type: <array>
presence: optional
content: |-
An array of payload UUIDs containing CA certificates that devices use to evaluate trust of controller certificates.
This key configures the device to accept the `LOMDeviceRequestCommand` from MDM and then send it to the target device. This certificate must contain the Key Usage attributes of Digital Signature, Key Encipherment and Data Encipherment. As well as the Extended Key Usage attributes of Server Authentication and Client Authentication.
subkeys:
- key: ControllerCACertificateUUIDsItem
type: <string>
notes:
- title: ''
content: You can configure a compatible macOS device to be both a controller and
a device. Include the UUID of the certificate in both `DeviceCertificateUUID`
and `ControllerCertificateUUID` properties.
examples:
- title: Profile example
files:
- file: examples/mdm/profiles/com.apple.lom/example1.plist