# DDM Assets

> What each DDM asset type is for, and how configurations reference an asset instead of a full configuration.

Source: https://docs.capaone.com/capaone/mobile-manager/apple-ddm/ddm-assets/  
Product: CapaOne — a separate CapaSystems product; do not apply this page to any other.

Assets are the second tab you'll see when creating a new DDM configuration, alongside
**Configurations**, at **Apple → Configurations → DDM → New**.

![CapaOne's Select a configuration type picker showing the Assets tab, listing the seven asset types](/attachments/capaone/apple-ddm-configuration-type-picker-assets.png)

## Asset vs. configuration

A **configuration** is a declaration you assign to a device or group — it's the thing that
applies a setting. An **asset** isn't assigned on its own. It's a reference to a credential,
identity, or piece of data that a configuration points to.

For example, a Wi-Fi configuration that authenticates with a certificate doesn't embed the
certificate directly — it references a **Security Identity** or an asset like **Asset Credential
Certificate**, and the asset supplies the credential.

Use an asset when a configuration needs to point to a credential or piece of data. Use a
configuration on its own when the setting doesn't involve a credential, identity, or shared data —
most configuration types (Passcode Settings, Software Update Settings, and so on) never need an
asset.

## Asset types

| Asset type | What it's for |
|---|---|
| **Asset Credential ACME** | A reference to an ACME identity. |
| **Asset Credential Certificate** | A reference to a PKCS #1 or PEM encoded certificate. |
| **Asset Credential Identity** | A reference to a PKCS #12 password-protected identity. |
| **Asset Credential SCEP** | A reference to a SCEP identity. See [SCEP in CapaOne](/capaone/reference/scep-in-capaone/) for how SCEP issuance works. |
| **Asset Credential User Name And Password** | A reference to data that describes a credential that represents a username and password. |
| **Asset Data** | A reference to arbitrary data with a specific media type. |
| **Asset User Identity** | The user-identity data. |

## Creating an asset

1. Navigate to **Apple → Configurations → DDM** and click **New**.
2. Switch to the **Assets** tab.
3. Select the asset type you need and fill in its details.
4. Save the asset.

Once saved, the asset is available to reference from any configuration that supports it — you
don't assign an asset to a device or group directly.

## Good to know

- **Assets aren't assigned to devices directly** — only configurations are. An unused asset has no
  effect until a configuration references it.
- **Certificate-based assets need the same chain-of-trust care as Legacy SCEP profiles** — see
  [SCEP in CapaOne](/capaone/reference/scep-in-capaone/) for the trust issues that apply equally to
  Asset Credential SCEP and Asset Credential Certificate.
- See [DDM Configuration Types Reference](/capaone/mobile-manager/apple-ddm/ddm-configuration-types-reference/)
  for the configuration types that can reference these assets.