Exchange ActiveSync

com.apple.eas.account

The payload that configures Exchange ActiveSync accounts.

iOS 4.0+visionOS 1.1+

Configuration Keys (43)

Showing 43 of 43 keys

Key	Type	Description	Default	Range
`UserName`string User	string	This user name for this Exchange account. Required for noninteractive installations like MDM in iOS.	Default: —	Range: —
`EmailAddress`string Email address	string	The full email address for the account. If not present in the payload, the device prompts for this string during profile installation.	Default: —	Range: —
`Password`string Password	string	The password of the account. Use only with encrypted profiles.	Default: —	Range: —
`OverridePreviousPassword`boolean Override previous password iOS 14.0+	boolean	If 'true', the system overrides the previous user/EAS password with the new EAS password in the payload.	Default: false	Range: —
`Host`string Exchange ActiveSync host required	string	The Exchange server host name or IP address.	Default: —	Range: —
`SSL`boolean Use SSL	boolean	If 'true', the system enables SSL for authentication.	Default: false	Range: —
`OAuth`boolean Use OAuth iOS 12.0+	boolean	If 'true', enables OAuth for authentication. If enabled, don't specify a password. Available only in iOS 12.0 and above.	Default: false	Range: —
`Certificate`data Authentication credential iOS 7.0+	data	The '.p12' identity certificate in NSData blob format, for accounts that allow authentication via certificate.	Default: —	Range: —
`CertificateName`string Authentication credential name iOS 7.0+	string	The name or description of the certificate.	Default: —	Range: —
`CertificatePassword`string Authentication credential password	string	The password necessary for the '.p12' identity certificate. Used with mandatory encryption of profiles.	Default: —	Range: —
`PreventMove`boolean Prevent move iOS 5.0+	boolean	If 'true', the system prevents moving messages from out of this email account into another account. This setting also prevents forwarding or replying from an account other than the recipient of the message.	Default: false	Range: —
`PreventAppSheet`boolean Prevent app sheet iOS 5.0+	boolean	If 'true', prevents this account from sending mail in any app other than the Apple Mail app.	Default: false	Range: —
`PayloadCertificateUUID`string Payload certificate UUID	string	The UUID of the certificate payload within the same profile to use for the identity credential. If this field is present, the Certificate field isn't used.	Default: —	Range: —
`SMIMEEnabled`boolean S/MIME enabled iOS 5.0+ · deprecated 10.0 · not on visionOS deprecated	boolean	If 'true', the system enables S/MIME encryption. In iOS 10.0 and later, this key is ignored. Use 'SMIMESigningEnabled' instead.	Default: false	Range: —
`SMIMESigningEnabled`boolean S/MIME signing enabled iOS 10.3+	boolean	If 'true', the system enables S/MIME signing for this account.	Default: false	Range: —
`SMIMESigningCertificateUUID`string S/MIME signing certificate iOS 5.0+	string	The UUID of the identity certificate used to sign messages sent from this account.	Default: —	Range: —
`SMIMEEncryptionEnabled`boolean S/MIME encryption enabled iOS 10.3+ · deprecated 12.0 · not on visionOS deprecated	boolean	If 'true', the system enables S/MIME encryption for this account. This key is deprecated. Use 'SMIMEEncryptByDefault' instead.	Default: false	Range: —
`SMIMEEncryptionCertificateUUID`string S/MIME encryption certificate iOS 5.0+	string	The payload UUID of the identity certificate used to decrypt messages sent to this account. The system attaches the public certificate to outgoing mail to allow the user to receive encrypted mail. When the user sends encrypted mail, the system uses the public certificate to encrypt the copy of the mail in the user's Sent mailbox.	Default: —	Range: —
`SMIMEEnablePerMessageSwitch`boolean S/MIME enable per-message switch iOS 8.0+ · deprecated 12.0 · not on visionOS deprecated	boolean	If 'true', the system displays the per-message encryption switch in the Mail Compose UI. This key is deprecated. Use 'SMIMEEnableEncryptionPerMessageSwitch' instead.	Default: false	Range: —
`SMIMESigningUserOverrideable`boolean Allow user to toggle S/MIME Signing iOS 12.0+	boolean	If 'true', the user can turn S/MIME signing on or off in Settings.	Default: false	Range: —
`SMIMESigningCertificateUUIDUserOverrideable`boolean Allow user to select S/MIME Identity iOS 12.0+	boolean	If 'true', the user can select the signing identity.	Default: false	Range: —
`SMIMEEncryptByDefault`boolean Enable S/MIME Encryption iOS 12.0+	boolean	If 'true', the system enables S/MIME encryption by default. If 'SMIMEEnableEncryptionPerMessageSwitch' is 'false', the user can't change this default.	Default: false	Range: —
`SMIMEEncryptByDefaultUserOverrideable`boolean Allow user to select S/MIME Encryption iOS 12.0+	boolean	If 'true', the system enables encryption by default and the user can't change it.	Default: false	Range: —
`SMIMEEncryptionCertificateUUIDUserOverrideable`boolean Allow user to select S/MIME Encryption Certificate iOS 12.0+	boolean	If 'true', the user can select the S/MIME encryption identity, and encryption is on.	Default: false	Range: —
`SMIMEEnableEncryptionPerMessageSwitch`boolean Allow user to select S/MIME Encryption per message iOS 12.0+	boolean	If 'true', the system displays the per-message encryption switch in the Mail Compose UI.	Default: false	Range: —
`EnableCalendars`boolean Enabled Services - Calendars iOS 13.0+	boolean	If 'false', the system disables the Calendars service for this account. The user can reenable Calendars service in Settings unless 'EnableCalendarsUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'.	Default: true	Range: —
`EnableContacts`boolean Enabled Services - Contacts iOS 13.0+	boolean	If 'false', the system disables the Contacts service for this account. The user can reenable Contacts service in Settings unless 'EnableContactsUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'.	Default: true	Range: —
`EnableMail`boolean Enabled Services - Mail iOS 13.0+	boolean	If 'false', the system disables the Mail service for this account. The user can reenable Mail service in Settings unless 'EnableMailUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'.	Default: true	Range: —
`EnableNotes`boolean Enabled Services - Notes iOS 13.0+	boolean	If 'false', the system disables the Notes service for this account. The user can reenable Notes service in Settings unless 'EnableNotesUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'.	Default: true	Range: —
`EnableReminders`boolean Enabled Services - Reminders iOS 13.0+	boolean	If 'false', the system disables the Reminders service for this account. The user can reenable Reminders service in Settings unless 'EnableRemindersUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'.	Default: true	Range: —
`EnableCalendarsUserOverridable`boolean Account Modification - Calendars iOS 13.0+	boolean	If 'false', the system prevents the user from changing the state of the Calendars service for this account in Settings.	Default: true	Range: —
`EnableContactsUserOverridable`boolean Account Modification - Contacts iOS 13.0+	boolean	If 'false', the system prevents the user from changing the state of the Contacts service for this account in Settings.	Default: true	Range: —
`EnableMailUserOverridable`boolean Account Modification - Mail iOS 13.0+	boolean	If 'false', the system prevents the user from changing the state of the Mail service for this account in Settings.	Default: true	Range: —
`EnableNotesUserOverridable`boolean Account Modification - Notes iOS 13.0+	boolean	If 'false', prevents the user from changing the state of the Notes service for this account in Settings.	Default: true	Range: —
`EnableRemindersUserOverridable`boolean Account Modification - Reminders iOS 13.0+	boolean	If 'false', the system prevents the user from changing the state of the Reminders service for this account in Settings.	Default: true	Range: —
`disableMailRecentsSyncing`boolean Disable mail recents syncing	boolean	If 'true', the system excludes this account from Recent Addresses syncing.	Default: false	Range: —
`MailNumberOfPastDaysToSync`integer Past days of mail to sync	integer	The number of days in the past to sync mail on the device. For no limit, use the value '0'.	Default: 7	Range: No Limit (0), 1 (1), 3 (3), 7 (7), 14 (14), 31 (31)
`CommunicationServiceRules`dict Communication service rules iOS 10.0+	dict	The communication service handler rules for this account.	Default: —	Range: —
`DefaultServiceHandlers`dict Default service handlers iOS 10.0+	dict	The default handlers to use for contacts from this account.	Default: —	Range: —
`AudioCall`string App for audio calls iOS 10.0+	string	The bundle identifier of the default application to use for audio calls made to contacts from this account.	Default: —	Range: —
`VPNUUID`string VPNUUID iOS 14.0+	string	The VPNUUID of the per-app VPN the account uses for network communication.	Default: —	Range: —
`HeaderMagic`string iOS · deprecated 7.0 · not on visionOS deprecated	string	The value of the 'X-Apple-Config-Magic' header in each EAS HTTP request.	Default: —	Range: —
`allowMailDrop`boolean Allow mail drop iOS 9.2+	boolean	If 'true', the system enables this account to use Mail Drop.	Default: false	Range: —
`OAuthSignInURL`string iOS 13.0+	string	The URL that this account should use for signing in through OAuth. Ignored unless 'OAuth' is 'true'. If you specify this URL, auto-discovery isn't used for this account, so you need to also specify a host.	Default: —	Range: —
`OAuthTokenRequestURL`string iOS 13.0+	string	The URL that this account should use for token requests through OAuth. Ignored unless 'OAuth' is 'true'.	Default: —	Range: —