Calendar Subscription Payload The CalSub payload is designated by the com.apple.subscribedcalendar.account PayloadType value. In addition to the settings common to all payloads, this payload defines the following: Key
Value
SubCalAccountDescription
String, optional. Description of the account.
SubCalAccountHostName
String, mandatory. The server address.
SubCalAccountUsername
String, optional. The user’s login name
SubCalAccountPassword
String, optional. The user’s password.
SubCalAccountUseSSL
Boolean, mandatory. Whether or not to use SSL.
SCEP Payload The SCEP (Simple Certificate Enrollment Protocol) payload is designated by the com.apple.encrypted-profile-service PayloadType value. In addition to the settings common to all payloads, this payload defines the following: Key
Value
URL
String, mandatory.
Name
String, optional. any string which is understood by the SCEP server. For example, it could be a domain name like example.org. If a certificate authority has multiple CA certificates this field can be used to distinguish which is required.
Subject
Array, optional. The representation of a X.500 name represented as an array of OID and value. For example, /C=US/O=Apple Inc./ CN=foo/1.2.5.3=bar, which would translate to: [ [ [“C”, “US”] ], [ [“O”, “Apple Inc.”] ], ..., [ [ “1.2.5.3”, “bar” ] ] ] OIDs can be represented as dotted numbers, with shortcuts for C, L, ST, O, OU, CN (country, locality, state, organization, organizational unit, common name).
Challenge
String, optional. A pre-shared secret.
Keysize
Number, optional. The keysize in bits, either 1024 or 2048.
Key Type
String, optional. Currently always “RSA”.
Key Usage
Number, optional. A bitmask indicating the use of the key. 1 is signing, 4 is encryption, 5 is both signing and encryption. Windows CA supports only encryption or signing, but not both at the same time.
Appendix B Configuration Profile Format
77