mirror of
https://github.com/apple/device-management.git
synced 2026-02-12 21:03:12 +00:00
69 lines
2.5 KiB
YAML
69 lines
2.5 KiB
YAML
title: Asset:Credential Identity
|
|
description: 'A reference to a PKCS #12 password-protected identity.'
|
|
payload:
|
|
declarationtype: com.apple.asset.credential.identity
|
|
supportedOS:
|
|
iOS:
|
|
introduced: '17.0'
|
|
macOS:
|
|
introduced: '14.0'
|
|
tvOS:
|
|
introduced: '17.0'
|
|
watchOS:
|
|
introduced: '10.0'
|
|
payloadkeys:
|
|
- key: Reference
|
|
type: <dictionary>
|
|
presence: required
|
|
content: |-
|
|
The external reference. Ensure that the asset data:
|
|
* Is a JSON document that represents the 'com.apple.credential.identity' credential type
|
|
* Uses a media type of 'application/json', and if it includes a 'ContentType' sub-key, that sub-key media type is also 'application/json'
|
|
subkeys:
|
|
- key: DataURL
|
|
type: <string>
|
|
presence: required
|
|
content: The URL that hosts the credential data. The URL must start with 'https://'.
|
|
- key: ContentType
|
|
type: <string>
|
|
presence: optional
|
|
content: The media type that describes the data.
|
|
- key: Size
|
|
type: <integer>
|
|
presence: optional
|
|
content: The size of the data at the 'DataURL'. Use this value to verify that
|
|
the returned data is the expected data. Use this value to detect when the data
|
|
changes.
|
|
- key: Hash-SHA-256
|
|
type: <string>
|
|
presence: optional
|
|
content: |-
|
|
A SHA-256 hash of the data at the 'DataURL'. Use this value to verify that the returned data is the expected data. Use this value to detect when the data changes.
|
|
If 'Size' is '0', clients need to ignore this value or set it to an empty string.
|
|
- key: Authentication
|
|
type: <dictionary>
|
|
presence: optional
|
|
content: The server authentication details.
|
|
subkeys:
|
|
- key: Type
|
|
type: <string>
|
|
presence: required
|
|
rangelist:
|
|
- MDM
|
|
- None
|
|
content: |-
|
|
Type of authentication:
|
|
* MDM - a request using MDM semantics (includes the device identity certificate, and any user authentication). Equivalent to an MDM request made to the CheckInURL or ServerURL. This option can only be used when using declarative device management.
|
|
* None - a standard GET request is carried out.
|
|
- key: Accessible
|
|
type: <string>
|
|
presence: optional
|
|
rangelist:
|
|
- Default
|
|
- AfterFirstUnlock
|
|
default: Default
|
|
content: |-
|
|
The keychain accessibility that determines when the keychain item is available for use, which has these allowed values:
|
|
* 'Default': The most restrictive accessibility that still satisfies all uses of the asset by configurations that reference it.
|
|
* 'AfterFirstUnlock': The keychain item is only available after the first unlock of the device.
|