Active Directory Certificate

A user-friendly description of the certification identity.

The fully qualified host name of the CA.

The name of the certificate authority (CA), which is determined from the common name (CN) of the Active Directory entry. Available in macOS 10.8 and later. Valid values: - CN=<your CA Name> - CN='Certification Authorities' - CN='Public Key Services' - CN='Services' - CN='Configuration' - CN=<your base Domain Name>

The certificate template for your environment. The default user certificate value is \'User\'. The default computer certificate value is \'Machine\'.

Default: "User"

This value is most commonly 'RPC'; if using web enrollment, use 'HTTP'. Available in macOS 10.8 and later.

Range: RPC, HTTP

The number of days in advance of certificate expiration that the notification center notifies the user.

Default: 14

The RSA key size for the certificate signing request (CSR). Available in macOS 10.11 and later.

Default: 2048

If 'true', the system prompts the user for credentials when is installs the profile. This key applies only to user certificates with the Manual Download profile delivery method. Omit this key for computer certificates. Available in macOS 10.8 and later.

Default: false

The user name with which to authenticate to the certificate server

The password with which to authenticate to the certificate server

If 'true', gives apps access to the private key. Available in macOS 10.10 and later.

Default: false

If 'true', the system allows exporting the private key. Available in macOS 10.10 and later.

Default: false

If 'true', the certificate obtained with this payload attempts auto-renewal. Auto-renewal can only be used with device Active Directory certificate payloads. Available in macOS 10.13.4 and later.

Default: false