Exchange ActiveSync

This user name for this Exchange account. Required for noninteractive installations like MDM in iOS.

The full email address for the account. If not present in the payload, the device prompts for this string during profile installation.

The password of the account. Use only with encrypted profiles.

If 'true', the system overrides the previous user/EAS password with the new EAS password in the payload. Available in iOS 14 and later.

The Exchange server host name or IP address.

If 'true', the system enables SSL for authentication.

If 'true', enables OAuth for authentication. If enabled, don't specify a password. Available only in iOS 12.0 and above.

The '.p12' identity certificate in NSData blob format, for accounts that allow authentication via certificate.

The name or description of the certificate.

The password necessary for the '.p12' identity certificate. Used with mandatory encryption of profiles.

If 'true', the system prevents moving messages from out of this email account into another account. This setting also prevents forwarding or replying from an account other than the recipient of the message.

If 'true', prevents this account from sending mail in any app other than the Apple Mail app.

The UUID of the certificate payload within the same profile to use for the identity credential. If this field is present, the Certificate field isn't used.

If 'true', the system enables S/MIME encryption. In iOS 10.0 and later, this key is ignored. Use 'SMIMESigningEnabled' instead.

If 'true', the system enables S/MIME signing for this account. Available in iOS 10.0 and later.

The UUID of the identity certificate used to sign messages sent from this account.

If 'true', the system enables S/MIME encryption for this account. Available in iOS 10.0 and later. As of iOS 12.0, this key is deprecated. Use 'SMIMEEncryptByDefault' instead.

The payload UUID of the identity certificate used to decrypt messages sent to this account. The system attaches the public certificate to outgoing mail to allow the user to receive encrypted mail. When the user sends encrypted mail, the system uses the public certificate to encrypt the copy of the mail in the user's Sent mailbox.

If 'true', the system displays the per-message encryption switch in the Mail Compose UI. Available in iOS 8.0 and later. As of iOS 12.0, this key is deprecated. Use 'SMIMEEnableEncryptionPerMessageSwitch' instead.

If 'true', the user can turn S/MIME signing on or off in Settings. Available in iOS 12.0 and later.

If 'true', the user can select the signing identity. Available in iOS 12.0 and later.

If 'true', the system enables S/MIME encryption by default. If 'SMIMEEnableEncryptionPerMessageSwitch' is 'false', the user can't change this default. Available in iOS 12.0 and later.

If 'true', the system enables encryption by default and the user can't change it. Available in iOS 12.0 and later.

If 'true', the user can select the S/MIME encryption identity, and encryption is on.Available in iOS 12.0 and later.

If 'true', the system displays the per-message encryption switch in the Mail Compose UI. Available in iOS 12.0 and later.

If 'false', the system disables the Calendars service for this account. The user can reenable Calendars service in Settings unless 'EnableCalendarsUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'.

If 'false', the system disables the Contacts service for this account. The user can reenable Contacts service in Settings unless 'EnableContactsUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'.

If 'false', the system disables the Mail service for this account. The user can reenable Mail service in Settings unless 'EnableMailUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'.

If 'false', the system disables the Notes service for this account. The user can reenable Notes service in Settings unless 'EnableNotesUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'.

If 'false', the system disables the Reminders service for this account. The user can reenable Reminders service in Settings unless 'EnableRemindersUserOverridable' is 'false'. Note: At least of the following fields needs to be 'true': 'EnableMail', 'EnableContacts', 'EnableCalendars', 'EnableReminders', and 'EnableNotes'.

If 'false', the system prevents the user from changing the state of the Calendars service for this account in Settings.

If 'false', the system prevents the user from changing the state of the Contacts service for this account in Settings.

If 'false', the system prevents the user from changing the state of the Mail service for this account in Settings.

If 'false', prevents the user from changing the state of the Notes service for this account in Settings.

If 'false', the system prevents the user from changing the state of the Reminders service for this account in Settings.

If 'true', the system excludes this account from Recent Addresses syncing.

The number of days in the past to sync mail on the device. For no limit, use the value '0'.

The communication service handler rules for this account.

The default handlers to use for contacts from this account.

The bundle identifier of the default application to use for audio calls made to contacts from this account.

The bundle identifier of the default application to use for audio calls made to contacts from this account.

The VPNUUID of the per-app VPN the account uses for network communication. Available in iOS 14 and later.

The value of the 'X-Apple-Config-Magic' header in each EAS HTTP request.

If 'true', the system enables this account to use Mail Drop.

The URL that this account should use for signing in through OAuth. Ignored unless 'OAuth' is 'true'. If you specify this URL, auto-discovery isn't used for this account, so you need to also specify a host.

The URL that this account should use for token requests through OAuth. Ignored unless 'OAuth' is 'true'.

The default handlers to use for contacts from this account.

The bundle identifier of the default application to use for audio calls made to contacts from this account.

The bundle identifier of the default application to use for audio calls made to contacts from this account.