---
title: SecurityPasskeyAttestation
framework: Device Management
role: symbol
role_heading: Object
platforms: [iOS 17.0+, iPadOS 17.0+, Mac Catalyst 17.0+, macOS 14.0+]
path: devicemanagement/securitypasskeyattestation
---

# SecurityPasskeyAttestation

The declaration to configure the device to allow WebAuthn enterprise attestation for certain passkeys.

## Declaration

```data
object SecurityPasskeyAttestation
```

## Properties

AttestationIdentityAssetReference: The identifier of an asset declaration that contains the identity to install and use for passkey attestation. AttestationIdentityKeyIsExtractable: If true, the private key for the attestation identity is extractable in the keychain. Available: macOS 14+ RelyingParties: An array of the relying parties to allow enterprise attestation.

## Discussion

Discussion Specify com.apple.configuration.security.passkey.attestation as the declaration type. Configuration availability  |   |   |   |   |   |   |   |  Configuration example This configuration enables enterprise passkey attestation for a relying party. {     "Type": "com.apple.configuration.security.passkey.attestation",     "Identifier": "EB13EE2B-5D63-4EBA-810F-5B81D07F5017",     "ServerToken": "E180CA9A-F089-4FA3-BBDF-94CC159C4AE8",     "Payload": {         "AttestationIdentityAssetReference": "AD0A8CB5-64EE-4CC9-8CB6-22DCBE6ED38A",         "RelyingParties": [             "example.com"         ]     } }

## See Also

### Configurations

- [AccessibilitySettings](devicemanagement/accessibilitysettings.md)
- [AccountCalDAV](devicemanagement/accountcaldav.md)
- [AccountCardDAV](devicemanagement/accountcarddav.md)
- [AccountExchange](devicemanagement/accountexchange.md)
- [AccountGoogle](devicemanagement/accountgoogle.md)
- [AccountLDAP](devicemanagement/accountldap.md)
- [AccountMail](devicemanagement/accountmail.md)
- [AccountSettings](devicemanagement/accountsettings.md)
- [AccountSubscribedCalendar](devicemanagement/accountsubscribedcalendar.md)
- [AppManaged](devicemanagement/appmanaged.md)
- [AppSettings](devicemanagement/appsettings.md)
- [AudioAccessorySettings](devicemanagement/audioaccessorysettings.md)
- [ContentCaching](devicemanagement/contentcaching.md)
- [DiskManagementSettings](devicemanagement/diskmanagementsettings.md)
- [ExtensibleSSO](devicemanagement/extensiblesso.md)