PayloadKit

Mail

com.apple.mail.managed

The payload that configures a Mail account.

iOS 4.0+macOS 10.7+visionOS 1.1+
Apple schemacombined

macOS: user channel only

Configuration Keys (37)

Showing 37 of 37 keys

KeyTypeDescriptionDefaultRange

Account type

required
stringDefines the protocol to use for the account.Default: "EmailTypeIMAP"Range: IMAP (EmailTypeIMAP), POP (EmailTypePOP)

Account description

stringA user-visible description of the email account, shown in the Mail and Settings applications.Default: —Range: —

Incoming Mail Server IMAP Path Prefix

stringThe path prefix for the IMAP mail server.Default: —Range: —

User Display Name

stringThe full user name for the account. The system displays this name in sent messages.Default: —Range: —

Email address

stringThe full email address for the account. If this string isn't present in the payload, the device prompts the user for this string during interactive profile installation in Settings or System Preferences.Default: —Range: —

IdentificationUUID

stringThe UUID of the Identification Payload to use as the source for the user email and username values.Default: —Range: —

Disallow user to move messages from this account

iOS 5.0+ · not on macOS

booleanIf 'true', the system prevents moving messages out of this email account and into another account. It also prevents forwarding or replying from an account other than the recipient of the message.Default: falseRange: —

Exclude account from recent addresses syncing

iOS 6.0+

booleanIf 'true', the system excludes this account from Recent Addresses syncing.Default: falseRange: —

Allow mail drop

iOS 9.2+ · macOS 10.12+

booleanIf 'true', the system enables this account to use Mail Drop.Default: falseRange: —

Use Only In Mail

iOS 5.0+ · not on macOS

booleanIf 'true', the system prevents this account from sending mail in any app other than the Apple Mail app.Default: falseRange: —

S/MIME enabled

iOS 5.0+ · not on macOS

booleanIf 'true', the system enables S/MIME encryption. The system ignores this key in iOS 10.0 and later.Default: falseRange: —

S/MIME signing enabled

iOS 10.0+ · not on macOS

booleanIf 'true', the system enables S/MIME signing for this account.Default: falseRange: —

S/MIME signing certificate

iOS 5.0+ · not on macOS

stringThe payload UUID of the identity certificate used to sign messages sent from this account.Default: —Range: —

S/MIME encryption enabled

iOS 10.0+ · not on macOS

booleanIf 'true', the system enables S/MIME encryption for this account.Default: falseRange: —

S/MIME encryption certificate

iOS 5.0+ · not on macOS

stringThe UUID of the identity certificate used to decrypt messages sent to this account. The system attaches the public certificate to outgoing mail to allow the user to receive encrypted mail. When the user sends encrypted mail, the system uses the public certificate to encrypt the copy of the mail in their Sent mailbox.Default: —Range: —

S/MIME enable per-message switch

iOS 8.0+ · deprecated 10.0 · not on macOS, visionOS

deprecated
booleanIf 'true', the system displays the per-message encryption switch in the Mail Compose UI. Deprecated in iOS 12.0. Use 'SMIMEEnableEncryptionPerMessageSwitch' instead.Default: falseRange: —

Enable S/MIME toggle

iOS 12.0+ · not on macOS

booleanIf 'true', the user can turn S/MIME signing on or off in Settings.Default: falseRange: —

Enable user to select the signing identity

iOS 12.0+ · not on macOS

booleanIf 'true', the user can select the signing identity.Default: falseRange: —

Enable S/MIME by default

iOS 12.0+ · not on macOS

booleanIf 'true', the system enables S/MIME encryption by default.Default: falseRange: —

Enable user to toggle S/MIME by default

iOS 12.0+ · not on macOS

booleanIf 'true', the user can turn encryption by default on/off, and encryption is on.Default: falseRange: —

Enable user to select the signing identity and encryption is enabled

iOS 12.0+ · not on macOS

booleanIf 'true', the user can select the S/MIME encryption identity, and encryption is on.Default: falseRange: —

Enable per-message encryption switch

iOS 12.0+ · not on macOS

booleanIf 'true', the system displays the per-message encryption switch in the Mail Compose UI.Default: falseRange: —
string—Default: —Range: —

Incoming Mail Server Hostname

required
stringThe incoming mail server host name.Default: —Range: —

Incoming Mail Server Port

integerThe incoming mail server port number. If not set, the system uses the default port for a given protocol.Default: 993Range: 0 – 65535

Incoming Mail Server Username

stringThe user name for the email account, usually the same as the email address up to the "@" character. If not set and the account requires authentication for incoming email, the device prompts the user for this string during interactive profile installation in Settings or System Preferences.Default: —Range: —

Incoming Mail Server Authentification Type

required
stringThe authentication scheme for incoming mail.Default: "EmailAuthPassword"Range: None (EmailAuthNone), Password (EmailAuthPassword), MD5 Challenge-Response (EmailAuthCRAMMD5), NTLM (EmailAuthNTLM), HTTP MD5 Digest (EmailAuthHTTPMD5)

Incoming Mail Server Password

stringThe password for the incoming mail server. Only use this in encrypted profiles.Default: —Range: —

Incoming Mail Server Use SSL

booleanIf 'true', the system enables SSL for authentication on the incoming mail server.Default: falseRange: —

Outgoing Mail Server Hostname

required
stringThe outgoing mail server host name.Default: —Range: —

Outgoing Mail Server Port

integerThe outgoing mail server port number. If not set, the system uses ports 25, 587, and 465, in that order.Default: 587Range: 0 – 65535

Outgoing Mail Server Username

stringThe user name for the email account, usually the same as the email address up to the "@" character. If not set and the account requires authentication for outgoing email, the device prompts the user for this string during interactive profile installation in Settings or System Preferences.Default: —Range: —

Outgoing Mail Server Authentication Type

required
stringThe authentication scheme for outgoing mail.Default: "EmailAuthPassword"Range: None (EmailAuthNone), Password (EmailAuthPassword), MD5 Challenge-Response (EmailAuthCRAMMD5), NTLM (EmailAuthNTLM), HTTP MD5 Digest (EmailAuthHTTPMD5)

Outgoing Mail Server Password

stringThe password for the outgoing mail server. Only use this in encrypted profiles.Default: —Range: —

Outgoing password same as incoming

booleanIf 'true', the system prompts the user only once for the password, which it uses for both outgoing and incoming mail. This setting is only supported by interactive profile installations. Not supported by non-interactive installations, such as MDM on iOS.Default: falseRange: —

Outgoing Mail Server Use SSL

booleanIf 'true', the system enables SSL authentication on the outgoing mail server.Default: falseRange: —
VPNUUIDstring

VPNUUID

iOS 14.0+ · not on macOS

stringThe VPNUUID of the per-app VPN the account uses for network communication.Default: —Range: —