---
title: SecurityIdentity
framework: Device Management
role: symbol
role_heading: Object
platforms: [iOS 17.0+, iPadOS 17.0+, Mac Catalyst 17.0+, macOS 14.0+, tvOS 17.0+, visionOS 1.1+, watchOS 10.0+]
path: devicemanagement/securityidentity
---

# SecurityIdentity

The declaration to configure an identity.

## Declaration

```data
object SecurityIdentity
```

## Properties

AllowAllAppsAccess: If true, apps can access the private key. Available: macOS 14+ CredentialAssetReference: The identifier of an asset declaration that contains the identity to install. KeyIsExtractable: If true, the private key is extractable in the keychain. Available: macOS 14+

## Discussion

Discussion Specify com.apple.configuration.security.identity as the declaration type. Configuration availability  |   |   |   |   |   |   |   |  Configuration example This configuration installs a certificate identity on the device. {     "Type": "com.apple.configuration.security.identity",     "Identifier": "EB13EE2B-5D63-4EBA-810F-5B81D07F5017",     "ServerToken": "E180CA9A-F089-4FA3-BBDF-94CC159C4AE8",     "Payload": {         "CredentialAssetReference": "48FFFD93-AB1E-4726-979E-421FD3265AA8"     } }

## See Also

### Configurations

- [AccessibilitySettings](devicemanagement/accessibilitysettings.md)
- [AccountCalDAV](devicemanagement/accountcaldav.md)
- [AccountCardDAV](devicemanagement/accountcarddav.md)
- [AccountExchange](devicemanagement/accountexchange.md)
- [AccountGoogle](devicemanagement/accountgoogle.md)
- [AccountLDAP](devicemanagement/accountldap.md)
- [AccountMail](devicemanagement/accountmail.md)
- [AccountSettings](devicemanagement/accountsettings.md)
- [AccountSubscribedCalendar](devicemanagement/accountsubscribedcalendar.md)
- [AppManaged](devicemanagement/appmanaged.md)
- [AppSettings](devicemanagement/appsettings.md)
- [AudioAccessorySettings](devicemanagement/audioaccessorysettings.md)
- [ContentCaching](devicemanagement/contentcaching.md)
- [DiskManagementSettings](devicemanagement/diskmanagementsettings.md)
- [ExtensibleSSO](devicemanagement/extensiblesso.md)