SecurityIdentity

The declaration to configure an identity.

Declaration

object SecurityIdentity

Properties

Name Type Description

Name	Type	Description
`AllowAllAppsAccess`	boolean	If `true`, apps can access the private key. Available: macOS 14+
`CredentialAssetReference` Required	string	The identifier of an asset declaration that contains the identity to install.
`KeyIsExtractable`	boolean	If `true`, the private key is extractable in the keychain. Available: macOS 14+

AllowAllAppsAccess

boolean

If true, apps can access the private key.

Available: macOS 14+

CredentialAssetReference Required

string

The identifier of an asset declaration that contains the identity to install.

KeyIsExtractable

boolean

If true, the private key is extractable in the keychain.

Available: macOS 14+

Discussion

Specify com.apple.configuration.security.identity as the declaration type.

Configuration availability


Allowed in supervised enrollment	iOS, macOS, Shared iPad, tvOS, visionOS, watchOS
Allowed in device enrollment	iOS, Shared iPad, tvOS, visionOS
Allowed in user enrollment	iOS, macOS, Shared iPad, visionOS
Allowed in local enrollment	iOS, macOS, Shared iPad, tvOS, visionOS, watchOS
Allowed in system scope	iOS, macOS, Shared iPad, tvOS, visionOS, watchOS
Allowed in user scope	macOS, Shared iPad
Apply	Multiple configurations are applied separately

Configuration example

This configuration installs a certificate identity on the device.

{
    "Type": "com.apple.configuration.security.identity",
    "Identifier": "EB13EE2B-5D63-4EBA-810F-5B81D07F5017",
    "ServerToken": "E180CA9A-F089-4FA3-BBDF-94CC159C4AE8",
    "Payload": {
        "CredentialAssetReference": "48FFFD93-AB1E-4726-979E-421FD3265AA8"
    }
}