---
title: VPN.IKEv2.ChildSecurityAssociationParameters
framework: devicemanagement
role: symbol
role_heading: Device Management Profile
path: devicemanagement/vpn/ikev2-data.dictionary/childsecurityassociationparameters-data.dictionary
---

# VPN.IKEv2.ChildSecurityAssociationParameters

The dictionary that contains child security association parameters.

## Declaration

```data
object VPN.IKEv2.ChildSecurityAssociationParameters
```

## Properties

DiffieHellmanGroup: The Diffie-Hellman group. For AlwaysOn VPN in iOS 14.2 and later, the minimum allowed value is 14. 1, 2, and 5 are available only in iOS, macOS, and visionOS prior to iOS 26, macOS 26, and visionOS 26. EncryptionAlgorithm: The encryption algorithm. In watchOS and tvOS, the default value is AES-256-GCM. DES and 3DES are available only in iOS, macOS, and visionOS prior to iOS 26, macOS 26, and visionOS 26. IntegrityAlgorithm: The integrity algorithm. SHA1-96 and SHA1-160 are available only in iOS, macOS, and visionOS prior to iOS 26, macOS 26, and visionOS 26. LifeTimeInMinutes: The SA lifetime (rekey interval) in minutes. PostQuantumKeyExchangeMethods: An array of integers representing postquantum key exchange methods the device uses during SA establishment and rekey. You can specify up to seven items, which correspond to ADDKE1 - ADDKE7 from RFC 9370. Available: iOS 26+ | iPadOS 26+ | macOS 26+ | tvOS 16+ | visionOS 26+ | watchOS 26+

## See Also

### Objects

- [VPN.IKEv2.IKESecurityAssociationParameters](devicemanagement/vpn/ikev2-data.dictionary/ikesecurityassociationparameters-data.dictionary.md)