pfm_description Use this section to define Wi-Fi settings pfm_title Wi-Fi pfm_format_version 1 pfm_version 1 pfm_domain com.apple.wifi.managed pfm_subkeys pfm_name PayloadDescription pfm_title Payload Description pfm_description Description of the payload pfm_type string pfm_default Configures Wi-Fi settings pfm_name PayloadDisplayName pfm_title Payload Display Name pfm_description Name of the payload pfm_type string pfm_default Wi-Fi pfm_require always pfm_name PayloadIdentifier pfm_title Payload Identifier pfm_description A unique identifier for the payload, dot-delimited. Usually root PayloadIdentifier+subidentifier pfm_type string pfm_default com.apple.wifi.managed pfm_require always pfm_name PayloadType pfm_title Payload Type pfm_description The type of the payload, a reverse dns string pfm_type string pfm_default com.apple.wifi.managed pfm_require always pfm_name PayloadUUID pfm_title Payload UUID pfm_description Unique identifier for the payload (format 01234567-89AB-CDEF-0123-456789ABCDEF) pfm_type string pfm_default pfm_require always pfm_format ^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$ pfm_name PayloadVersion pfm_title Payload Version pfm_description The version of the whole configuration profile. pfm_type integer pfm_default 1 pfm_require always pfm_name PayloadOrganization pfm_title Payload Organization pfm_description This value describes the issuing organization of the profile, as displayed to the user pfm_type string pfm_name NONEXISTENT pfm_title Nonexistent flag pfm_description pfm_type string pfm_name SSID_STR pfm_title SSID pfm_description SSID of the Wi-Fi network to be used pfm_type string pfm_name HIDDEN_NETWORK pfm_title Hidden pfm_description If set, assumes the network is hidden. Otherwise the device will use broadcast SSID to identify the network. pfm_type boolean pfm_default pfm_name AutoJoin pfm_title Auto Join pfm_description Automatically join the network pfm_type boolean pfm_default pfm_name CaptiveBypass pfm_title Disable Captive Network Detection pfm_description Do not show the captive network sheet pfm_type boolean pfm_default pfm_name DisableAssociationMACRandomization pfm_type boolean pfm_default pfm_name EncryptionType pfm_title Encryption Type pfm_description Wireless network encryption to use when connecting pfm_type string pfm_require always pfm_default None pfm_range_list WEP WPA WPA2 Any None pfm_name IsHotspot pfm_title Is Hotspot pfm_description Is a legacy or Hotspot 2.0 network pfm_type boolean pfm_require always pfm_default pfm_name DomainName pfm_title Domain Name pfm_description HotSpot 2.0 domain name pfm_type string pfm_name DisplayedOperatorName pfm_title Displayed Operator Name pfm_description HotSpot 2.0 operator name pfm_type string pfm_exclude pfm_target_conditions pfm_target DomainName pfm_present pfm_name ServiceProviderRoamingEnabled pfm_title Roaming Enable pfm_description HotSpot 2.0 allow roaming flag pfm_type boolean pfm_default pfm_exclude pfm_target_conditions pfm_target DomainName pfm_present pfm_name RoamingConsortiumOIs pfm_title Roaming OIs pfm_description HotSpot 2.0 organization identifiers pfm_type array pfm_subkeys pfm_name RoamingConsortiumOI pfm_type string pfm_format ^([0-9A-Za-z]{6})|([0-9A-Za-z]{9})$ pfm_exclude pfm_target_conditions pfm_target DomainName pfm_present pfm_name NAIRealmNames pfm_title Realm Names pfm_description HotSpot 2.0 NAI realm names pfm_type array pfm_subkeys pfm_name NAIRealmName pfm_type string pfm_exclude pfm_target_conditions pfm_target DomainName pfm_present pfm_name MCCAndMNCs pfm_title MCC/MNCs pfm_description HotSpot 2.0 MCC/MNCs pfm_type array pfm_subkeys pfm_name MCCAndMNC pfm_type string pfm_format ^[0-9]{6}$ pfm_exclude pfm_target_conditions pfm_target DomainName pfm_present pfm_name EAPClientConfiguration pfm_title EAP Client Configuration pfm_description Specifies 802.1x EAP authentication parameters pfm_type dictionary pfm_subkeys pfm_name AcceptEAPTypes pfm_title Accept EAP Types pfm_description The EAP types accepted pfm_type array pfm_subkeys pfm_name EAPType pfm_title EAP Type pfm_description An integer representing an EAP type, inside of the Accept EAP Types array pfm_type integer pfm_range_list 13 17 21 25 43 18 23 pfm_name UserName pfm_title Username pfm_description Username. If not provided, the user may be prompted during login pfm_type string pfm_conditionals pfm_require push pfm_target_conditions pfm_target EAPClientConfiguration.AcceptEAPTypes pfm_contains_any 17 21 25 43 pfm_exclude pfm_require push pfm_target_conditions pfm_target EAPClientConfiguration.AcceptEAPTypes pfm_n_contains_any 17 21 25 43 pfm_name UserPassword pfm_title Password pfm_description Password. If not provided, the user may be prompted during login pfm_type string pfm_conditionals pfm_require push pfm_target_conditions pfm_target EAPClientConfiguration.AcceptEAPTypes pfm_contains_any 17 21 25 43 pfm_target EAPClientConfiguration.OneTimeUserPassword pfm_n_range_list pfm_exclude pfm_target_conditions pfm_target EAPClientConfiguration.OneTimeUserPassword pfm_range_list pfm_target EAPClientConfiguration.OneTimeUserPassword pfm_present pfm_target_conditions pfm_target EAPClientConfiguration.AcceptEAPTypes pfm_n_contains_any 17 21 25 43 pfm_name OneTimeUserPassword pfm_title Per-Connection Password pfm_description If set, the user will be prompted for a password each time they connect to the network pfm_type boolean pfm_default pfm_exclude pfm_target_conditions pfm_target EAPClientConfiguration.AcceptEAPTypes pfm_n_contains_any 17 21 25 43 pfm_name PayloadCertificateAnchorUUID pfm_title Certificate Anchor UUID pfm_description Array of UUIDs corresponding to the trusted certificates for this authentication pfm_type array pfm_subkeys pfm_name CertificateAnchorUUID pfm_title Individual Certificate Anchor UUID pfm_description A UUID for a trusted certificate pfm_type string pfm_format ^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$ pfm_name TLSTrustedServerNames pfm_title TLS Trusted Server Names pfm_description Array of Common Names of server certificates that can be trusted. The wildcard * can be used to match a range of strings pfm_type array pfm_subkeys pfm_name TLSTrustedServerName pfm_title Individual Trusted TLS Server Name pfm_description An item in the TLS Trusted Server Names array representing a Common Name of a server certificate. pfm_type string pfm_name TLSAllowTrustExceptions pfm_title Allow Trust Exceptions pfm_description No longer supported in iOS 8 and later pfm_type boolean pfm_exclude pfm_target_conditions pfm_target NONEXISTENT pfm_present pfm_name TTLSInnerAuthentication pfm_title TTLS Inner Authentication pfm_description Specifies the inner authentication used by the TTLS module pfm_type string pfm_range_list PAP EAP CHAP MSCHAP MSCHAPv2 pfm_default MSCHAPv2 pfm_conditionals pfm_require always pfm_target_conditions pfm_target EAPClientConfiguration.AcceptEAPTypes pfm_contains_any 21 pfm_exclude pfm_target_conditions pfm_target EAPClientConfiguration.AcceptEAPTypes pfm_n_contains_any 21 pfm_name OuterIdentity pfm_title Outer Identity pfm_description If TTLS, PEAP, or EAP-FAST is used, this string is used instead of the user's identity outside the encrypted tunnel. This value can be used to mask the true identity of the person using the network pfm_type string pfm_exclude pfm_target_conditions pfm_target EAPClientConfiguration.AcceptEAPTypes pfm_n_contains_any 21 25 43 pfm_name TLSMinimumVersion pfm_title TLS Minimum Version pfm_description Minimum TLS Version pfm_type string pfm_default 1.0 pfm_range_list 1.0 1.1 1.2 1.3 pfm_exclude pfm_target_conditions pfm_target EAPClientConfiguration.AcceptEAPTypes pfm_n_contains_any 13 21 25 43 pfm_name TLSMaximumVersion pfm_title TLS Maximum Version pfm_description Maximum TLS Version pfm_type string pfm_range_list 1.0 1.1 1.2 1.3 pfm_exclude pfm_target_conditions pfm_target EAPClientConfiguration.AcceptEAPTypes pfm_n_contains_any 13 21 25 43 pfm_name EAPFASTUsePAC pfm_title Use PAC pfm_description If set, the device will use an existing PAC if it's present. Otherwise the server must present its identity using a certificate pfm_type boolean pfm_default pfm_exclude pfm_target_conditions pfm_target EAPClientConfiguration.AcceptEAPTypes pfm_n_contains_any 43 pfm_name EAPFASTProvisionPAC pfm_title Provision PAC pfm_description If set, provisions the device pfm_type boolean pfm_default pfm_exclude pfm_target_conditions pfm_target EAPClientConfiguration.AcceptEAPTypes pfm_n_contains_any 43 pfm_target_conditions pfm_target EAPClientConfiguration.EAPFASTUsePAC pfm_n_range_list pfm_name EAPFASTProvisionPACAnonymously pfm_title Provision PAC Anonymously pfm_description If set, provisions the device anonymously. Note that there are known man-in-the-middle attacks for anonymous provisioning pfm_type boolean pfm_default pfm_exclude pfm_target_conditions pfm_target EAPClientConfiguration.AcceptEAPTypes pfm_n_contains_any 43 pfm_target_conditions pfm_target EAPClientConfiguration.EAPFASTProvisionPAC pfm_n_range_list pfm_name EAPSIMNumberOfRANDs pfm_title Allow Two RANDs pfm_description The minimum number of RAND values accepted from the server. 3 is the default, and 2 is allowed, but offers less security. For use with EAP-SIM only. pfm_type integer pfm_default 3 pfm_exclude pfm_target_conditions pfm_target EAPClientConfiguration.AcceptEAPTypes pfm_n_contains_any 18 pfm_name Password pfm_title Password pfm_description Specifies the password for the access point pfm_type string pfm_exclude pfm_target_conditions pfm_target EAPClientConfiguration pfm_present pfm_name PayloadCertificateUUID pfm_title Certificate UUID pfm_description UUID of the certificate payload containing the client credential. Must refer to an identity. pfm_type string pfm_format ^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$ pfm_exclude pfm_target_conditions pfm_target EAPClientConfiguration.AcceptEAPTypes pfm_n_contains_any 13 21 25 43 pfm_conditionals pfm_require always pfm_target_conditions pfm_target EAPClientConfiguration.AcceptEAPTypes pfm_contains_any 13 pfm_require push pfm_target_conditions pfm_target EAPClientConfiguration.AcceptEAPTypes pfm_contains_any 21 25 43 pfm_name TLSCertificateRequired pfm_title Certificate Required pfm_description Not present by default. If YES, PayloadCertificateUUID is used as a second factor for PEAP, EAP-FAST, and TTLS. If NO, PayloadCertificateUUID is not used for TLS. pfm_type boolean pfm_name ProxyType pfm_title Proxy Type pfm_description The type of proxy configuration to use for this wireless connection pfm_type string pfm_default None pfm_range_list None Manual Auto pfm_name ProxyServer pfm_title Proxy Server pfm_description The hostname of the proxy server pfm_type string pfm_conditionals pfm_require always pfm_target_conditions pfm_target ProxyType pfm_range_list Manual pfm_target ProxyType pfm_present pfm_exclude pfm_target_conditions pfm_target ProxyType pfm_n_range_list Manual pfm_name ProxyUsername pfm_title Proxy Username pfm_description The username for proxy server authentication pfm_type string pfm_exclude pfm_target_conditions pfm_target ProxyType pfm_n_range_list Manual pfm_name ProxyServerPort pfm_title Proxy Server Port pfm_description The port used to connect to the proxy server pfm_type integer pfm_range_min 0 pfm_range_max 65535 pfm_conditionals pfm_require always pfm_target_conditions pfm_target ProxyType pfm_range_list Manual pfm_target ProxyType pfm_present pfm_exclude pfm_target_conditions pfm_target ProxyType pfm_n_range_list Manual pfm_name ProxyPassword pfm_title Proxy Password pfm_description The password to authenticate with the proxy pfm_type string pfm_exclude pfm_target_conditions pfm_target ProxyType pfm_n_range_list Manual pfm_name ProxyPACURL pfm_title Proxy Username pfm_description URL used to recieve proxy settings pfm_type string pfm_exclude pfm_target_conditions pfm_target ProxyType pfm_n_range_list Auto pfm_name ProxyPACFallbackAllowed pfm_title Proxy PAC Fallback Allowed pfm_description Proxy PAC Fallback Allowed pfm_type boolean pfm_default pfm_exclude pfm_target_conditions pfm_target ProxyType pfm_n_range_list Auto pfm_name QoSMarkingPolicy pfm_title QoS Marking Policy pfm_description Restrict fast lane QoS marking pfm_type dictionary pfm_subkeys pfm_name QoSMarkingEnabled pfm_title Allow QoS marking pfm_description Enable any kind of QoS marking pfm_type boolean pfm_default pfm_name QoSMarkingAppleAudioVideoCalls pfm_title QoS marking for audio/video calls pfm_description Enable QoS for WiFi Calling, FaceTime, SMS, etc. pfm_type boolean pfm_default pfm_name QoSMarkingWhitelistedAppIdentifiers pfm_title Whitelisted App Identifiers pfm_description Whitelist specific apps for QoS marking pfm_type array pfm_subkeys pfm_name appBundleID pfm_title Whitelisted App pfm_description Whitelisted App pfm_type string pfm_default