com.apple.mail.managed
The payload that configures a Mail account.
macOS: user channel only
Configuration Keys (37)
| Key | Type | Title |
|---|---|---|
EmailAccountTyperequiredDefines the protocol to use for the account. Default: "EmailTypeIMAP" Range: IMAP (EmailTypeIMAP), POP (EmailTypePOP) | string | Account type |
EmailAccountDescriptionA user-visible description of the email account, shown in the Mail and Settings applications. | string | Account description |
IncomingMailServerIMAPPathPrefixThe path prefix for the IMAP mail server. | string | Incoming Mail Server IMAP Path Prefix |
EmailAccountNameThe full user name for the account. The system displays this name in sent messages. | string | User Display Name |
EmailAddressThe full email address for the account. If this string isn't present in the payload, the device prompts the user for this string during interactive profile installation in Settings or System Preferences. | string | Email address |
IdentificationUUIDThe UUID of the Identification Payload to use as the source for the user email and username values. | string | IdentificationUUID |
PreventMoveiOS 5.0+ · not on macOS If 'true', the system prevents moving messages out of this email account and into another account. It also prevents forwarding or replying from an account other than the recipient of the message. Default: false | boolean | Disallow user to move messages from this account |
disableMailRecentsSyncingiOS 6.0+ If 'true', the system excludes this account from Recent Addresses syncing. Default: false | boolean | Exclude account from recent addresses syncing |
allowMailDropiOS 9.2+ · macOS 10.12+ If 'true', the system enables this account to use Mail Drop. Default: false | boolean | Allow mail drop |
PreventAppSheetiOS 5.0+ · not on macOS If 'true', the system prevents this account from sending mail in any app other than the Apple Mail app. Default: false | boolean | Use Only In Mail |
SMIMEEnablediOS 5.0+ · not on macOS If 'true', the system enables S/MIME encryption. The system ignores this key in iOS 10.0 and later. Default: false | boolean | S/MIME enabled |
SMIMESigningEnablediOS 10.0+ · not on macOS If 'true', the system enables S/MIME signing for this account. Default: false | boolean | S/MIME signing enabled |
SMIMESigningCertificateUUIDiOS 5.0+ · not on macOS The payload UUID of the identity certificate used to sign messages sent from this account. | string | S/MIME signing certificate |
SMIMEEncryptionEnablediOS 10.0+ · not on macOS If 'true', the system enables S/MIME encryption for this account. Default: false | boolean | S/MIME encryption enabled |
SMIMEEncryptionCertificateUUIDiOS 5.0+ · not on macOS The UUID of the identity certificate used to decrypt messages sent to this account. The system attaches the public certificate to outgoing mail to allow the user to receive encrypted mail. When the user sends encrypted mail, the system uses the public certificate to encrypt the copy of the mail in their Sent mailbox. | string | S/MIME encryption certificate |
SMIMEEnablePerMessageSwitchdeprecatediOS 8.0+ · deprecated 10.0 · not on macOS, visionOS If 'true', the system displays the per-message encryption switch in the Mail Compose UI. Deprecated in iOS 12.0. Use 'SMIMEEnableEncryptionPerMessageSwitch' instead. Default: false | boolean | S/MIME enable per-message switch |
SMIMESigningUserOverrideableiOS 12.0+ · not on macOS If 'true', the user can turn S/MIME signing on or off in Settings. Default: false | boolean | Enable S/MIME toggle |
SMIMESigningCertificateUUIDUserOverrideableiOS 12.0+ · not on macOS If 'true', the user can select the signing identity. Default: false | boolean | Enable user to select the signing identity |
SMIMEEncryptByDefaultiOS 12.0+ · not on macOS If 'true', the system enables S/MIME encryption by default. Default: false | boolean | Enable S/MIME by default |
SMIMEEncryptByDefaultUserOverrideableiOS 12.0+ · not on macOS If 'true', the user can turn encryption by default on/off, and encryption is on. Default: false | boolean | Enable user to toggle S/MIME by default |
SMIMEEncryptionCertificateUUIDUserOverrideableiOS 12.0+ · not on macOS If 'true', the user can select the S/MIME encryption identity, and encryption is on. Default: false | boolean | Enable user to select the signing identity and encryption is enabled |
SMIMEEnableEncryptionPerMessageSwitchiOS 12.0+ · not on macOS If 'true', the system displays the per-message encryption switch in the Mail Compose UI. Default: false | boolean | Enable per-message encryption switch |
PFC_SegmentedControl_0required | string | — |
IncomingMailServerHostNamerequiredThe incoming mail server host name. | string | Incoming Mail Server Hostname |
IncomingMailServerPortNumberThe incoming mail server port number. If not set, the system uses the default port for a given protocol. Default: 993 Range: 0 – 65535 | integer | Incoming Mail Server Port |
IncomingMailServerUsernameThe user name for the email account, usually the same as the email address up to the "@" character. If not set and the account requires authentication for incoming email, the device prompts the user for this string during interactive profile installation in Settings or System Preferences. | string | Incoming Mail Server Username |
IncomingMailServerAuthenticationrequiredThe authentication scheme for incoming mail. Default: "EmailAuthPassword" Range: None (EmailAuthNone), Password (EmailAuthPassword), MD5 Challenge-Response (EmailAuthCRAMMD5), NTLM (EmailAuthNTLM), HTTP MD5 Digest (EmailAuthHTTPMD5) | string | Incoming Mail Server Authentification Type |
IncomingPasswordThe password for the incoming mail server. Only use this in encrypted profiles. | string | Incoming Mail Server Password |
IncomingMailServerUseSSLIf 'true', the system enables SSL for authentication on the incoming mail server. Default: false | boolean | Incoming Mail Server Use SSL |
OutgoingMailServerHostNamerequiredThe outgoing mail server host name. | string | Outgoing Mail Server Hostname |
OutgoingMailServerPortNumberThe outgoing mail server port number. If not set, the system uses ports 25, 587, and 465, in that order. Default: 587 Range: 0 – 65535 | integer | Outgoing Mail Server Port |
OutgoingMailServerUsernameThe user name for the email account, usually the same as the email address up to the "@" character. If not set and the account requires authentication for outgoing email, the device prompts the user for this string during interactive profile installation in Settings or System Preferences. | string | Outgoing Mail Server Username |
OutgoingMailServerAuthenticationrequiredThe authentication scheme for outgoing mail. Default: "EmailAuthPassword" Range: None (EmailAuthNone), Password (EmailAuthPassword), MD5 Challenge-Response (EmailAuthCRAMMD5), NTLM (EmailAuthNTLM), HTTP MD5 Digest (EmailAuthHTTPMD5) | string | Outgoing Mail Server Authentication Type |
OutgoingPasswordThe password for the outgoing mail server. Only use this in encrypted profiles. | string | Outgoing Mail Server Password |
OutgoingPasswordSameAsIncomingPasswordIf 'true', the system prompts the user only once for the password, which it uses for both outgoing and incoming mail. This setting is only supported by interactive profile installations. Not supported by non-interactive installations, such as MDM on iOS. Default: false | boolean | Outgoing password same as incoming |
OutgoingMailServerUseSSLIf 'true', the system enables SSL authentication on the outgoing mail server. Default: false | boolean | Outgoing Mail Server Use SSL |
VPNUUIDiOS 14.0+ · not on macOS The VPNUUID of the per-app VPN the account uses for network communication. | string | VPNUUID |