Exchange ActiveSync

com.apple.eas.account

The payload that configures Exchange ActiveSync accounts.

iOS 4.0+visionOS 1.1+

Configuration Keys (43)

Key	Type	Title	Description	Default	Range
`UserName` This user name for this Exchange account. Required for noninteractive installations like MDM in iOS.	string	User	This user name for this Exchange account. Required for noninteractive installations like MDM in iOS.	—	—
`EmailAddress` The full email address for the account. If not present in the payload, the device prompts for this string during profile installation.	string	Email address	The full email address for the account. If not present in the payload, the device prompts for this string during profile installation.	—	—
`Password` The password of the account. Use only with encrypted profiles.	string	Password	The password of the account. Use only with encrypted profiles.	—	—
`OverridePreviousPassword` iOS 14.0+ If 'true', the system overrides the previous user/EAS password with the new EAS password in the payload. Default: false	boolean	Override previous password	If 'true', the system overrides the previous user/EAS password with the new EAS password in the payload.	false	—
`Host`required The Exchange server host name or IP address.	string	Exchange ActiveSync host	The Exchange server host name or IP address.	—	—
`SSL` If 'true', the system enables SSL for authentication. Default: false	boolean	Use SSL	If 'true', the system enables SSL for authentication.	false	—
`OAuth` iOS 12.0+ If 'true', enables OAuth for authentication. If enabled, don't specify a password. Available only in iOS 12.0 and above. Default: false	boolean	Use OAuth	If 'true', enables OAuth for authentication. If enabled, don't specify a password. Available only in iOS 12.0 and above.	false	—
`Certificate` iOS 7.0+ The '.p12' identity certificate in NSData blob format, for accounts that allow authentication via certificate.	data	Authentication credential	The '.p12' identity certificate in NSData blob format, for accounts that allow authentication via certificate.	—	—
`CertificateName` iOS 7.0+ The name or description of the certificate.	string	Authentication credential name	The name or description of the certificate.	—	—
`CertificatePassword` The password necessary for the '.p12' identity certificate. Used with mandatory encryption of profiles.	string	Authentication credential password	The password necessary for the '.p12' identity certificate. Used with mandatory encryption of profiles.	—	—
`PreventMove` iOS 5.0+ If 'true', the system prevents moving messages from out of this email account into another account. This setting also prevents forwarding or replying from an account other than the recipient of the message. Default: false	boolean	Prevent move	If 'true', the system prevents moving messages from out of this email account into another account. This setting also prevents forwarding or replying from an account other than the recipient of the message.	false	—
`PreventAppSheet` iOS 5.0+ If 'true', prevents this account from sending mail in any app other than the Apple Mail app. Default: false	boolean	Prevent app sheet	If 'true', prevents this account from sending mail in any app other than the Apple Mail app.	false	—
`PayloadCertificateUUID` The UUID of the certificate payload within the same profile to use for the identity credential. If this field is present, the Certificate field isn't used.	string	Payload certificate UUID	The UUID of the certificate payload within the same profile to use for the identity credential. If this field is present, the Certificate field isn't used.	—	—
`SMIMEEnabled`deprecated iOS 5.0+ · deprecated 10.0 · not on visionOS If 'true', the system enables S/MIME encryption. In iOS 10.0 and later, this key is ignored. Use 'SMIMESigningEnabled' instead. Default: false	boolean	S/MIME enabled	If 'true', the system enables S/MIME encryption. In iOS 10.0 and later, this key is ignored. Use 'SMIMESigningEnabled' instead.	false	—
`SMIMESigningEnabled` iOS 10.3+ If 'true', the system enables S/MIME signing for this account. Default: false	boolean	S/MIME signing enabled	If 'true', the system enables S/MIME signing for this account.	false	—
`SMIMESigningCertificateUUID` iOS 5.0+ The UUID of the identity certificate used to sign messages sent from this account.	string	S/MIME signing certificate	The UUID of the identity certificate used to sign messages sent from this account.	—	—
`SMIMEEncryptionEnabled`deprecated iOS 10.3+ · deprecated 12.0 · not on visionOS If 'true', the system enables S/MIME encryption for this account. This key is deprecated. Use 'SMIMEEncryptByDefault' instead. Default: false	boolean	S/MIME encryption enabled	If 'true', the system enables S/MIME encryption for this account. This key is deprecated. Use 'SMIMEEncryptByDefault' instead.	false	—
`SMIMEEncryptionCertificateUUID` iOS 5.0+ The payload UUID of the identity certificate used to decrypt messages sent to this account. The system attaches the public certificate to outgoing mail to allow the user to receive encrypted mail. When the user sends encrypted mail, the system uses the public certificate to encrypt the copy of the mail in the user's Sent mailbox.	string	S/MIME encryption certificate	The payload UUID of the identity certificate used to decrypt messages sent to this account. The system attaches the public certificate to outgoing mail to allow the user to receive encrypted mail. When the user sends encrypted mail, the system uses the public certificate to encrypt the copy of the mail in the user's Sent mailbox.	—	—
`SMIMEEnablePerMessageSwitch`deprecated iOS 8.0+ · deprecated 12.0 · not on visionOS If 'true', the system displays the per-message encryption switch in the Mail Compose UI. This key is deprecated. Use 'SMIMEEnableEncryptionPerMessageSwitch' instead. Default: false	boolean	S/MIME enable per-message switch	If 'true', the system displays the per-message encryption switch in the Mail Compose UI. This key is deprecated. Use 'SMIMEEnableEncryptionPerMessageSwitch' instead.	false	—
`SMIMESigningUserOverrideable` iOS 12.0+ If 'true', the user can turn S/MIME signing on or off in Settings. Default: false	boolean	Allow user to toggle S/MIME Signing	If 'true', the user can turn S/MIME signing on or off in Settings.	false	—
`SMIMESigningCertificateUUIDUserOverrideable` iOS 12.0+ If 'true', the user can select the signing identity. Default: false	boolean	Allow user to select S/MIME Identity	If 'true', the user can select the signing identity.	false	—
`SMIMEEncryptByDefault` iOS 12.0+ If 'true', the system enables S/MIME encryption by default. If 'SMIMEEnableEncryptionPerMessageSwitch' is 'false', the user can't change this default. Default: false	boolean	Enable S/MIME Encryption	If 'true', the system enables S/MIME encryption by default. If 'SMIMEEnableEncryptionPerMessageSwitch' is 'false', the user can't change this default.	false	—
`SMIMEEncryptByDefaultUserOverrideable` iOS 12.0+ If 'true', the system enables encryption by default and the user can't change it. Default: false	boolean	Allow user to select S/MIME Encryption	If 'true', the system enables encryption by default and the user can't change it.	false	—
`SMIMEEncryptionCertificateUUIDUserOverrideable` iOS 12.0+ If 'true', the user can select the S/MIME encryption identity, and encryption is on. Default: false	boolean	Allow user to select S/MIME Encryption Certificate	If 'true', the user can select the S/MIME encryption identity, and encryption is on.	false	—
`SMIMEEnableEncryptionPerMessageSwitch` iOS 12.0+ If 'true', the system displays the per-message encryption switch in the Mail Compose UI. Default: false	boolean	Allow user to select S/MIME Encryption per message	If 'true', the system displays the per-message encryption switch in the Mail Compose UI.	false	—
`EnableCalendars` iOS 13.0+ If 'false', the system disables the Calendars service for this account. The user can reenable Calendars service in Settings unless 'EnableCalendarsUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'. Default: true	boolean	Enabled Services - Calendars	If 'false', the system disables the Calendars service for this account. The user can reenable Calendars service in Settings unless 'EnableCalendarsUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'.	true	—
`EnableContacts` iOS 13.0+ If 'false', the system disables the Contacts service for this account. The user can reenable Contacts service in Settings unless 'EnableContactsUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'. Default: true	boolean	Enabled Services - Contacts	If 'false', the system disables the Contacts service for this account. The user can reenable Contacts service in Settings unless 'EnableContactsUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'.	true	—
`EnableMail` iOS 13.0+ If 'false', the system disables the Mail service for this account. The user can reenable Mail service in Settings unless 'EnableMailUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'. Default: true	boolean	Enabled Services - Mail	If 'false', the system disables the Mail service for this account. The user can reenable Mail service in Settings unless 'EnableMailUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'.	true	—
`EnableNotes` iOS 13.0+ If 'false', the system disables the Notes service for this account. The user can reenable Notes service in Settings unless 'EnableNotesUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'. Default: true	boolean	Enabled Services - Notes	If 'false', the system disables the Notes service for this account. The user can reenable Notes service in Settings unless 'EnableNotesUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'.	true	—
`EnableReminders` iOS 13.0+ If 'false', the system disables the Reminders service for this account. The user can reenable Reminders service in Settings unless 'EnableRemindersUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'. Default: true	boolean	Enabled Services - Reminders	If 'false', the system disables the Reminders service for this account. The user can reenable Reminders service in Settings unless 'EnableRemindersUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'.	true	—
`EnableCalendarsUserOverridable` iOS 13.0+ If 'false', the system prevents the user from changing the state of the Calendars service for this account in Settings. Default: true	boolean	Account Modification - Calendars	If 'false', the system prevents the user from changing the state of the Calendars service for this account in Settings.	true	—
`EnableContactsUserOverridable` iOS 13.0+ If 'false', the system prevents the user from changing the state of the Contacts service for this account in Settings. Default: true	boolean	Account Modification - Contacts	If 'false', the system prevents the user from changing the state of the Contacts service for this account in Settings.	true	—
`EnableMailUserOverridable` iOS 13.0+ If 'false', the system prevents the user from changing the state of the Mail service for this account in Settings. Default: true	boolean	Account Modification - Mail	If 'false', the system prevents the user from changing the state of the Mail service for this account in Settings.	true	—
`EnableNotesUserOverridable` iOS 13.0+ If 'false', prevents the user from changing the state of the Notes service for this account in Settings. Default: true	boolean	Account Modification - Notes	If 'false', prevents the user from changing the state of the Notes service for this account in Settings.	true	—
`EnableRemindersUserOverridable` iOS 13.0+ If 'false', the system prevents the user from changing the state of the Reminders service for this account in Settings. Default: true	boolean	Account Modification - Reminders	If 'false', the system prevents the user from changing the state of the Reminders service for this account in Settings.	true	—
`disableMailRecentsSyncing` If 'true', the system excludes this account from Recent Addresses syncing. Default: false	boolean	Disable mail recents syncing	If 'true', the system excludes this account from Recent Addresses syncing.	false	—
`MailNumberOfPastDaysToSync` The number of days in the past to sync mail on the device. For no limit, use the value '0'. Default: 7 Range: No Limit (0), 1 (1), 3 (3), 7 (7), 14 (14), 31 (31)	integer	Past days of mail to sync	The number of days in the past to sync mail on the device. For no limit, use the value '0'.	7
`CommunicationServiceRules` iOS 10.0+ The communication service handler rules for this account.	dict	Communication service rules	The communication service handler rules for this account.	—	—
`DefaultServiceHandlers` iOS 10.0+ The default handlers to use for contacts from this account.	dict	Default service handlers	The default handlers to use for contacts from this account.	—	—
`AudioCall` iOS 10.0+ The bundle identifier of the default application to use for audio calls made to contacts from this account.	string	App for audio calls	The bundle identifier of the default application to use for audio calls made to contacts from this account.	—	—
`VPNUUID` iOS 14.0+ The VPNUUID of the per-app VPN the account uses for network communication.	string	VPNUUID	The VPNUUID of the per-app VPN the account uses for network communication.	—	—
`HeaderMagic`deprecated iOS · deprecated 7.0 · not on visionOS The value of the 'X-Apple-Config-Magic' header in each EAS HTTP request.	string	—	The value of the 'X-Apple-Config-Magic' header in each EAS HTTP request.	—	—
`allowMailDrop` iOS 9.2+ If 'true', the system enables this account to use Mail Drop. Default: false	boolean	Allow mail drop	If 'true', the system enables this account to use Mail Drop.	false	—
`OAuthSignInURL` iOS 13.0+ The URL that this account should use for signing in through OAuth. Ignored unless 'OAuth' is 'true'. If you specify this URL, auto-discovery isn't used for this account, so you need to also specify a host.	string	—	The URL that this account should use for signing in through OAuth. Ignored unless 'OAuth' is 'true'. If you specify this URL, auto-discovery isn't used for this account, so you need to also specify a host.	—	—
`OAuthTokenRequestURL` iOS 13.0+ The URL that this account should use for token requests through OAuth. Ignored unless 'OAuth' is 'true'.	string	—	The URL that this account should use for token requests through OAuth. Ignored unless 'OAuth' is 'true'.	—	—