Mail

Defines the protocol to use for the account.

Default: "EmailTypeIMAP"

Range: IMAP (EmailTypeIMAP), POP (EmailTypePOP)

A user-visible description of the email account, shown in the Mail and Settings applications.

The path prefix for the IMAP mail server.

The full user name for the account. The system displays this name in sent messages.

The full email address for the account. If this string isn't present in the payload, the device prompts the user for this string during interactive profile installation in Settings or System Preferences.

The UUID of the Identification Payload to use as the source for the user email and username values.

If 'true', the system prevents moving messages out of this email account and into another account. It also prevents forwarding or replying from an account other than the recipient of the message.

Default: false

If 'true', the system excludes this account from Recent Addresses syncing.

Default: false

If 'true', the system enables this account to use Mail Drop.

Default: false

If 'true', the system prevents this account from sending mail in any app other than the Apple Mail app.

Default: false

If 'true', the system enables S/MIME encryption. The system ignores this key in iOS 10.0 and later.

Default: false

If 'true', the system enables S/MIME signing for this account.

Default: false

The payload UUID of the identity certificate used to sign messages sent from this account.

If 'true', the system enables S/MIME encryption for this account.

Default: false

The UUID of the identity certificate used to decrypt messages sent to this account. The system attaches the public certificate to outgoing mail to allow the user to receive encrypted mail. When the user sends encrypted mail, the system uses the public certificate to encrypt the copy of the mail in their Sent mailbox.

If 'true', the system displays the per-message encryption switch in the Mail Compose UI. Deprecated in iOS 12.0. Use 'SMIMEEnableEncryptionPerMessageSwitch' instead.

Default: false

If 'true', the user can turn S/MIME signing on or off in Settings.

Default: false

If 'true', the user can select the signing identity.

Default: false

If 'true', the system enables S/MIME encryption by default.

Default: false

If 'true', the user can turn encryption by default on/off, and encryption is on.

Default: false

If 'true', the user can select the S/MIME encryption identity, and encryption is on.

Default: false

If 'true', the system displays the per-message encryption switch in the Mail Compose UI.

Default: false

The incoming mail server host name.

The incoming mail server port number. If not set, the system uses the default port for a given protocol.

Default: 993

Range: 0 – 65535

The user name for the email account, usually the same as the email address up to the "@" character. If not set and the account requires authentication for incoming email, the device prompts the user for this string during interactive profile installation in Settings or System Preferences.

The authentication scheme for incoming mail.

Default: "EmailAuthPassword"

Range: None (EmailAuthNone), Password (EmailAuthPassword), MD5 Challenge-Response (EmailAuthCRAMMD5), NTLM (EmailAuthNTLM), HTTP MD5 Digest (EmailAuthHTTPMD5)

The password for the incoming mail server. Only use this in encrypted profiles.

If 'true', the system enables SSL for authentication on the incoming mail server.

Default: false

The outgoing mail server host name.

The outgoing mail server port number. If not set, the system uses ports 25, 587, and 465, in that order.

Default: 587

Range: 0 – 65535

The user name for the email account, usually the same as the email address up to the "@" character. If not set and the account requires authentication for outgoing email, the device prompts the user for this string during interactive profile installation in Settings or System Preferences.

The authentication scheme for outgoing mail.

Default: "EmailAuthPassword"

Range: None (EmailAuthNone), Password (EmailAuthPassword), MD5 Challenge-Response (EmailAuthCRAMMD5), NTLM (EmailAuthNTLM), HTTP MD5 Digest (EmailAuthHTTPMD5)

The password for the outgoing mail server. Only use this in encrypted profiles.

If 'true', the system prompts the user only once for the password, which it uses for both outgoing and incoming mail. This setting is only supported by interactive profile installations. Not supported by non-interactive installations, such as MDM on iOS.

Default: false

If 'true', the system enables SSL authentication on the outgoing mail server.

Default: false

The VPNUUID of the per-app VPN the account uses for network communication. Available in iOS 14 and later.