Profiles are the primary means to manage devices. Configure profiles so that your tvOS devices remain secure and configured to your preferred settings.

You can think of profiles as the settings and rules that, when combined with compliance policies, help you enforce corporate rules and procedures. They contain the settings, configurations, and restrictions that you want to enforce on devices.

A profile consists of a specific payload. Profiles work best when they contain only a single payload.

Device Access

Some device profiles configure the settings for accessing a tvOS device. Use these profiles to ensure that access to a device is limited only to authorized users.

Device Security

Ensure that your macOS devices remain secure through device profiles. These profiles configure the native tvOS security features or configure corporate security settings on a device through Workspace ONE UEM.

Device Configuration

Configure your tvOS devices with configuration profiles. These profiles configure the device settings to meet your business needs.

Configure a Conference Room Display (tvOS)

Use this payload to customize the conference room display settings. Enabling this feature allows you schedule the messages on the screen.

  1. Navigate to Resources > Profiles & Baselines > Profiles > Add > Add a Profile. Select tvOS.
  2. Enter the name of the profile and add the description.
  3. Click Conference Room Display and select ADD.
  4. Select Message Displayed on the Screen and enter the message. Click Next.
  5. In the Assignment page, configure the following settings:

    Settings

    Description

    Smart Group

    Assign the profile to a smart group. Select the smart group from the drop-down.

    Allow Exclusion

    Enable or Disable this option based on the criteria. If you choose to enable this option, select the groups to exclude from Exclude Groupdrop-down.

    Deployment

    Select the deployment type. The available options are:

    • Managed

    • Manual

    Removal Date

    Select the date from the panel.

    Assignment Type

    Select the type of the assignment. The available options are:

    • Auto

    • Optional

    • Compliance

    Allow Removal

    Select the assignment removal options.

    • Always

    • With Authorization

    • Never

    Managed By

    Select the organization group at which the profile is managed.

    Install Only

    Enable or disable this option based on the criteria. By default, it is disabled. If you choose to enable, select the areas Install only on devices inside selected areas.

    Schedule Install Time

    Enable scheduling and install only during selected time period.

  6. Click Save and Publish.

Configure a Credential Source Profile (tvOS)

Push certificates to streamline and secure Wi-Fi login for tvOS devices.

  1. Navigate to Resources > Profiles & Baselines > Profiles > Add > Add a Profile. Select tvOS.
  2. Enter the name of the profile and add the description.
  3. Click Credentials and ADD.
  4. In the Credential Source, select from the following options:
    • Upload - Upload the certificate from your local repository.

    • Define Certificate Authority - If you choose this option, select the Certificate Authority and certificate template.

    • User Certificate - Select S/MIME Signing Certificate or S/MIME Encryption Certificate from the drop-down.

  5. Enter the credential name.
  6. Select the certificate file from your local repository and select Next.
  7. In the Assignment Page, configure the following settings:

    Settings

    Description

    Smart Group

    Assign the profile to a smart group. Select the smart group from the drop-down.

    Allow Exclusion

    Enable or Disable this option based on the criteria. If you choose to enable this option, select the groups to exclude from Exclude Groupdrop-down.

    Deployment

    Select the deployment type. The available options are:

    • Managed

    • Manual

    Removal Date

    Select the date from the panel.

    Assignment Type

    Select the type of the assignment. The available options are:

    • Auto

    • Optional

    • Compliance

    Allow Removal

    Select the assignment removal options.

    • Always

    • With Authorization

    • Never

    Managed By

    Select the organization group at which the profile is managed.

    Install Only

    Enable or disable this option based on the criteria. By default, it is disabled. If you choose to enable, select the areas Install only on devices inside selected areas.

    Schedule Install Time

    Enable scheduling and install only during selected time period.

  8. Click Save and Publish.

Configure a Custom Settings Profile (tvOS)

Use the Custom Settings payload to enter your own XML into a profile and apply the profile to devices.

  1. Navigate to Resources > Profiles & Baselines > Profiles > Add > Add a Profile. Select tvOS.
  2. Enter the name of the profile and add the description.
  3. In the Custom Settings, click Add and then click Next.
  4. In the Assignment page, configure the following settings:

    Settings

    Description

    Smart Group

    Assign the profile to a smart group. Select the smart group from the drop-down.

    Allow Exclusion

    Enable or Disable this option based on the criteria. If you choose to enable this option, select the groups to exclude from Exclude Groupdrop-down.

    Deployment

    Select the deployment type. The available options are:

    • Managed

    • Manual

    Removal Date

    Select the date from the panel.

    Assignment Type

    Select the type of the assignment. The available options are:

    • Auto

    • Optional

    • Compliance

    Allow Removal

    Select the assignment removal options.

    • Always

    • With Authorization

    • Never

    Managed By

    Select the organization group at which the profile is managed.

    Install Only

    Enable or disable this option based on the criteria. By default, it is disabled. If you choose to enable, select the areas Install only on devices inside selected areas.

    Schedule Install Time

    Enable scheduling and install only during selected time period.

  5. Click Save and Publish.

Configure a Restrictions Profile (tvOS)

  1. Navigate to Resources > Profiles & Baselines > Profiles > Add > Add a Profile. Select tvOS.
  2. Enter the name of the profile and add the description.
  3. Select Restrictions and click ADD.
  4. Enable Force AirPlay incoming requests pairing password and click Next.
  5. In the Assignment page, configure the following settings:

    Settings

    Description

    Smart Group

    Assign the profile to a smart group. Select the smart group from the drop-down.

    Allow Exclusion

    Enable or Disable this option based on the criteria. If you choose to enable this option, select the groups to exclude from Exclude Groupdrop-down.

    Deployment

    Select the deployment type. The available options are:

    • Managed

    • Manual

    Removal Date

    Select the date from the panel.

    Assignment Type

    Select the type of the assignment. The available options are:

    • Auto

    • Optional

    • Compliance

    Allow Removal

    Select the assignment removal options.

    • Always

    • With Authorization

    • Never

    Managed By

    Select the organization group at which the profile is managed.

    Install Only

    Enable or disable this option based on the criteria. By default, it is disabled. If you choose to enable, select the areas Install only on devices inside selected areas.

    Schedule Install Time

    Enable scheduling and install only during selected time period.

  6. Click Save and Publish.

Configure a Single App Mode Profile (tvOS)

Use Single App Mode profile to provision devices so they can only access a single app of their choice.

  1. Navigate to Resources > Profiles & Baselines > Profiles > Add > Add a Profile. Select tvOS.
  2. Enter the name of the profile and add the description.
  3. Enter the Single App Mode settings including:

    Settings

    Description

    Application Bundle ID

    Enter the Application Bundle ID.

    Disable Touch Screen

    Enable this to disable the touch screen.

    Disable auto-lock

    Enable this to disable the auto-lock option.

    Enable VoiceOver

    If you have enabled this option, choose to enableAllow User to Adjust VoiceOver.

    Enable zoom

    If you have enabled this option, choose to enable the following settings:

    • Allow User to Adjust Zoom

    • Enable color inversion

    Enable Color Inversion

    If you have enabled this option, choose to enable, Allow User to Adjust Invert Colors.

  4. Click Next.
  5. In the Assignment page, configure the following settings:

    Settings

    Description

    Smart Group

    Assign the profile to a smart group. Select the smart group from the drop-down.

    Allow Exclusion

    Enable or Disable this option based on the criteria. If you choose to enable this option, select the groups to exclude from Exclude Groupdrop-down.

    Deployment

    Select the deployment type. The available options are:

    • Managed

    • Manual

    Removal Date

    Select the date from the panel.

    Assignment Type

    Select the type of the assignment. The available options are:

    • Auto

    • Optional

    • Compliance

    Allow Removal

    Select the assignment removal options.

    • Always

    • With Authorization

    • Never

    Managed By

    Select the organization group at which the profile is managed.

    Install Only

    Enable or disable this option based on the criteria. By default, it is disabled. If you choose to enable, select the areas in Install only on devices inside selected areas.

    Schedule Install Time

    Enable scheduling and install only during selected time period.

  6. Click Save and Publish.

Configure a Wi-Fi Access Profile (tvOS)

A Wi-Fi profile lets devices connect to corporate networks, even if they are hidden, encrypted, or password protected. This can be useful for automatically configuring devices to connect to the appropriate wireless network while in an office.

  1. Navigate to Resources > Profiles & Baselines > Profiles > Add > Add a Profile. Select tvOS.
  2. Enter the profile name and add description to your profile name.
  3. Select the Wi-Fi payload from the list.
  4. Configure Wi-Fi settings, including:

    Settings

    Description

    Service Set Identifier

    This is the name of the network the device connects to.

    Hidden Network

    Auto-Join

    This determines whether the device automatically connects to the network.

    Security Type

    This is the type of access protocol used and whether certificates are required.

    Password

    This is the password required for the device to connect to the network.

    Proxy

    This enables an automatic or manual proxy that you can configure for your Wi-Fi profile.

    Gateway Platform

    Select either Manual or Auto.

  5. Select Add to view the summary and then select Next.
  6. In the Assignment page, configure the following settings:

    Settings

    Description

    Smart Group

    Assign the profile to a smart group. Select the smart group from the drop-down.

    Allow Exclusion

    Enable or Disable this option based on the criteria. If you choose to enable this option, select the groups to exclude from Exclude Groupdrop-down.

    Deployment

    Select the deployment type. The available options are:

    • Managed

    • Manual

    Removal Date

    Select the date from the panel.

    Assignment Type

    Select the type of the assignment. The available options are:

    • Auto

    • Optional

    • Compliance

    Allow Removal

    Select the assignment removal options.

    • Always

    • With Authorization

    • Never

    Managed By

    Select the organization group at which the profile is managed.

    Install Only

    Enable or disable this option based on the criteria. By default, it is disabled. If you choose to enable, select the areas Install only on devices inside selected areas.

    Schedule Install Time

    Enable scheduling and install only during selected time period.

  7. Select Save & Publish.