Apple tvOS Profiles

Profiles are the primary means to manage devices. Configure profiles so that your tvOS devices remain secure and configured to your preferred settings.

You can think of profiles as the settings and rules that, when combined with compliance policies, help you enforce corporate rules and procedures. They contain the settings, configurations, and restrictions that you want to enforce on devices.

A profile consists of a specific payload. Profiles work best when they contain only a single payload.

Device Access

Some device profiles configure the settings for accessing a tvOS device. Use these profiles to ensure that access to a device is limited only to authorized users.

• Use a Wi-Fi profile to connect enrolled devices to your corporate Wi-Fi without sending the network credentials to users. For more information, see Configure a Wi-Fi Access Profile (tvOS).

Device Security

Ensure that your macOS devices remain secure through device profiles. These profiles configure the native tvOS security features or configure corporate security settings on a device through Workspace ONE UEM.

• Implement digital certificates to protect corporate assets. For more information, see Configure a Credential Source Profile (tvOS).

Device Configuration

Configure your tvOS devices with configuration profiles. These profiles configure the device settings to meet your business needs.

• Simplify the enrollment setup process for tvOS devices by creating a streamlined enrollment workflow using Auto Advance Setup profile. For more information, see Configure an Auto-Advance Setup Profile (tvOS).

Configure a Conference Room Display (tvOS)

Use this payload to customize the conference room display settings. Enabling this feature allows you schedule the messages on the screen.

1. Navigate to Resources > Profiles & Baselines > Profiles > Add > Add a Profile. Select tvOS.
2. Enter the name of the profile and add the description.
3. Click Conference Room Display and select ADD.
4. Select Message Displayed on the Screen and enter the message. Click Next.
5. In the Assignment page, configure the following settings:

   Settings	Description
   Smart Group	Assign the profile to a smart group. Select the smart group from the drop-down.
   Allow Exclusion	Activate or Deactivate this option based on the criteria. If you choose to enable this option, select the groups to exclude from Exclude Groupdrop-down.
   Deployment	Select the deployment type. The available options are: Managed Manual
   Removal Date	Select the date from the panel.
   Assignment Type	Select the type of the assignment. The available options are: Auto Optional Compliance
   Allow Removal	Select the assignment removal options. Always With Authorization Never
   Managed By	Select the organization group at which the profile is managed.
   Install Only	Activate or deactivate this option based on the criteria. By default, it is deactivated. If you choose to enable, select the areas Install only on devices inside selected areas.
   Schedule Install Time	Enable scheduling and install only during selected time period.

6. Click Save and Publish.

Configure a Credential Source Profile (tvOS)

Push certificates to streamline and secure Wi-Fi login for tvOS devices.

1. Navigate to Resources > Profiles & Baselines > Profiles > Add > Add a Profile. Select tvOS.
2. Enter the name of the profile and add the description.
3. Click Credentials and ADD.
4. In the Credential Source, select from the following options:

   • Upload - Upload the certificate from your local repository.

   • Define Certificate Authority - If you choose this option, select the Certificate Authority and certificate template.

   • User Certificate - Select S/MIME Signing Certificate or S/MIME Encryption Certificate from the drop-down.

5. Enter the credential name.
6. Select the certificate file from your local repository and select Next.
7. In the Assignment Page, configure the following settings:

   Settings	Description
   Smart Group	Assign the profile to a smart group. Select the smart group from the drop-down.
   Allow Exclusion	Activate or Deactivate this option based on the criteria. If you choose to enable this option, select the groups to exclude from Exclude Groupdrop-down.
   Deployment	Select the deployment type. The available options are: Managed Manual
   Removal Date	Select the date from the panel.
   Assignment Type	Select the type of the assignment. The available options are: Auto Optional Compliance
   Allow Removal	Select the assignment removal options. Always With Authorization Never
   Managed By	Select the organization group at which the profile is managed.
   Install Only	Activate or deactivate this option based on the criteria. By default, it is deactivated. If you choose to enable, select the areas Install only on devices inside selected areas.
   Schedule Install Time	Enable scheduling and install only during selected time period.

8. Click Save and Publish.

Configure a Custom Settings Profile (tvOS)

Use the Custom Settings payload to enter your own XML into a profile and apply the profile to devices.

1. Navigate to Resources > Profiles & Baselines > Profiles > Add > Add a Profile. Select tvOS.
2. Enter the name of the profile and add the description.
3. In the Custom Settings, click Add and then click Next.
4. In the Assignment page, configure the following settings:

   Settings	Description
   Smart Group	Assign the profile to a smart group. Select the smart group from the drop-down.
   Allow Exclusion	Activate or Deactivate this option based on the criteria. If you choose to enable this option, select the groups to exclude from Exclude Groupdrop-down.
   Deployment	Select the deployment type. The available options are: Managed Manual
   Removal Date	Select the date from the panel.
   Assignment Type	Select the type of the assignment. The available options are: Auto Optional Compliance
   Allow Removal	Select the assignment removal options. Always With Authorization Never
   Managed By	Select the organization group at which the profile is managed.
   Install Only	Activate or deactivate this option based on the criteria. By default, it is deactivated. If you choose to enable, select the areas Install only on devices inside selected areas.
   Schedule Install Time	Enable scheduling and install only during selected time period.

5. Click Save and Publish.

Configure a Restrictions Profile (tvOS)

1. Navigate to Resources > Profiles & Baselines > Profiles > Add > Add a Profile. Select tvOS.
2. Enter the name of the profile and add the description.
3. Select Restrictions and click ADD.
4. Enable Force AirPlay incoming requests pairing password and click Next.
5. In the Assignment page, configure the following settings:

   Settings	Description
   Smart Group	Assign the profile to a smart group. Select the smart group from the drop-down.
   Allow Exclusion	Activate or Deactivate this option based on the criteria. If you choose to enable this option, select the groups to exclude from Exclude Groupdrop-down.
   Deployment	Select the deployment type. The available options are: Managed Manual
   Removal Date	Select the date from the panel.
   Assignment Type	Select the type of the assignment. The available options are: Auto Optional Compliance
   Allow Removal	Select the assignment removal options. Always With Authorization Never
   Managed By	Select the organization group at which the profile is managed.
   Install Only	Activate or deactivate this option based on the criteria. By default, it is deactivated. If you choose to enable, select the areas Install only on devices inside selected areas.
   Schedule Install Time	Enable scheduling and install only during selected time period.

6. Click Save and Publish.

Configure a Single App Mode Profile (tvOS)

Use Single App Mode profile to provision devices so they can only access a single app of their choice.

1. Navigate to Resources > Profiles & Baselines > Profiles > Add > Add a Profile. Select tvOS.
2. Enter the name of the profile and add the description.
3. Enter the Single App Mode settings including:

   Settings	Description
   Application Bundle ID	Enter the Application Bundle ID.
   Disable Touch Screen	Enable this to deactivate the touch screen.
   Disable auto-lock	Enable this to deactivate the auto-lock option.
   Enable VoiceOver	If you have enabled this option, choose to enableAllow User to Adjust VoiceOver.
   Enable zoom	If you have enabled this option, choose to enable the following settings: Allow User to Adjust Zoom Enable color inversion
   Enable Color Inversion	If you have enabled this option, choose to enable, Allow User to Adjust Invert Colors.

   

4. Click Next.
5. In the Assignment page, configure the following settings:

   Settings	Description
   Smart Group	Assign the profile to a smart group. Select the smart group from the drop-down.
   Allow Exclusion	Activate or Deactivate this option based on the criteria. If you choose to enable this option, select the groups to exclude from Exclude Groupdrop-down.
   Deployment	Select the deployment type. The available options are: Managed Manual
   Removal Date	Select the date from the panel.
   Assignment Type	Select the type of the assignment. The available options are: Auto Optional Compliance
   Allow Removal	Select the assignment removal options. Always With Authorization Never
   Managed By	Select the organization group at which the profile is managed.
   Install Only	Activate or deactivate this option based on the criteria. By default, it is deactivated. If you choose to enable, select the areas in Install only on devices inside selected areas.
   Schedule Install Time	Enable scheduling and install only during selected time period.

6. Click Save and Publish.

Configure a Wi-Fi Access Profile (tvOS)

A Wi-Fi profile lets devices connect to corporate networks, even if they are hidden, encrypted, or password protected. This can be useful for automatically configuring devices to connect to the appropriate wireless network while in an office.

1. Navigate to Resources > Profiles & Baselines > Profiles > Add > Add a Profile. Select tvOS.
2. Enter the profile name and add description to your profile name.
3. Select the Wi-Fi payload from the list.
4. Configure Wi-Fi settings, including:

   Settings	Description
   Service Set Identifier	This is the name of the network the device connects to.
   Hidden Network
   Auto-Join	This determines whether the device automatically connects to the network.
   Security Type	This is the type of access protocol used and whether certificates are required.
   Password	This is the password required for the device to connect to the network.
   Proxy	This enables an automatic or manual proxy that you can configure for your Wi-Fi profile.
   Gateway Platform	Select either Manual or Auto.

   
5. Select Add to view the summary and then select Next.
6. In the Assignment page, configure the following settings:

   Settings	Description
   Smart Group	Assign the profile to a smart group. Select the smart group from the drop-down.
   Allow Exclusion	Activate or Deactivate this option based on the criteria. If you choose to enable this option, select the groups to exclude from Exclude Groupdrop-down.
   Deployment	Select the deployment type. The available options are: Managed Manual
   Removal Date	Select the date from the panel.
   Assignment Type	Select the type of the assignment. The available options are: Auto Optional Compliance
   Allow Removal	Select the assignment removal options. Always With Authorization Never
   Managed By	Select the organization group at which the profile is managed.
   Install Only	Activate or deactivate this option based on the criteria. By default, it is deactivated. If you choose to enable, select the areas Install only on devices inside selected areas.
   Schedule Install Time	Enable scheduling and install only during selected time period.

7. Select Save & Publish.