User Guide

72 Appendix B Configuration Profile Format

Profile Removal Password Payload

The Removal Password payload is designated by the

com.apple.profileRemovalPassword value of PayloadType. It’s purpose is to encode the

password that allows users to remove a configuration profile from the device. If this

payload is present, and has a password value set, the device will ask for the password

when the user taps a profile’s Remove button. This payload is encrypted with the rest of

the profile.

Passcode Policy Payload

The Passcode Policy payload is designated by the

com.apple.mobiledevice.passwordpolicy PayloadType value. The presence of this

payload type prompts iPhone to present the user with an alphanumeric passcode entry

mechanism, which allows the entry of arbitrarily long and complex passcodes.

In addition to the settings common to all payloads, this payload defines the following:

PayloadIdentifier String, mandatory. This value is by convention a dot-delimited

string uniquely describing the payload. It’s usually the root

PayloadIdentifier with an appended subidentifier, describing the

particular payload.

PayloadDisplayName String, mandatory. This value is a very short string displayed to the

user which describes the profile, such as “VPN Settings”. It does not

have to be unique.

PayloadDescription String, optional. This value determines what descriptive, free-form

text is displayed on the Detail screen for this particular payload.

Key Value

RemovalPassword String, optional. Specifies the removal password for the profile.

Key Value

allowSimple Boolean, optional. Default YES. Determines whether a simple

passcode is allowed. A simple passcode is defined as containing

repeated characters, or increasing/decreasing characters (such

as 123 or CBA). Setting this value to “NO” is synonymous to

setting minComplexChars to “1”.

forcePIN Boolean, optional. Default NO. Determines whether the user is

forced to set a PIN. Simply setting this value (and not others)

forces the user to enter a passcode, without imposing a length

or quality.