---
title: NetworkVPNAlwaysOnSecurityAssociationParametersObject
framework: Device Management
role: symbol
role_heading: Object
platforms: [iOS 27.0+, iPadOS 27.0+, Mac Catalyst 27.0+, visionOS 27.0+]
path: devicemanagement/networkvpnalwaysonsecurityassociationparametersobject
---

# NetworkVPNAlwaysOnSecurityAssociationParametersObject

These parameters apply to Child Security Association unless ChildSecurityAssociationParameters is specified.

## Declaration

```data
object NetworkVPNAlwaysOnSecurityAssociationParametersObject
```

## Properties

DiffieHellmanGroup: The Diffie-Hellman group. For AlwaysOn VPN, the minimum allowed value is 14. EncryptionAlgorithm: The encryption algorithm. In tvOS the default value is AES-256-GCM. IntegrityAlgorithm: The integrity algorithm. LifeTimeInMinutes: The SA lifetime (rekey interval) in minutes. PostQuantumKeyExchangeMethods: An array of integers representing postquantum key exchange methods the device uses during SA establishment and rekey. You can specify up to seven items, which correspond to ADDKE1 - ADDKE7 from RFC 9370.

## See Also

### Objects

- [NetworkVPNAlwaysOnTunnelConfigurationElement_IKEV2_AuthenticationObject](devicemanagement/networkvpnalwaysontunnelconfigurationelement_ikev2_authenticationobject.md)
- [NetworkVPNAlwaysOnTunnelConfigurationElement_IKEV2_IdleObject](devicemanagement/networkvpnalwaysontunnelconfigurationelement_ikev2_idleobject.md)
- [NetworkVPNAlwaysOnTunnelConfigurationElement_IKEV2_PostQuantumKeyExchangeObject](devicemanagement/networkvpnalwaysontunnelconfigurationelement_ikev2_postquantumkeyexchangeobject.md)