This reference lists every configuration type available under Apple → Configurations → DDM →
New, on the Configurations tab. For asset types (the Assets tab in the same picker), see
DDM Assets.

The picker itself lists every type alphabetically, in a single grid — the categories below are
groupings for this reference, not a distinction CapaOne’s UI makes. Beta and Supervised
only tags are shown as-is in the picker. Supervised only means the configuration has no
effect on Unsupervised (BYOD) devices; see Endpoint Management
Modes for the Supervised/Unsupervised split.
| Configuration type |
Notes |
| Account CalDAV |
Configure a Calendar account. |
| Account CardDAV |
Configure a Contacts account. |
| Account Exchange |
Configure an Exchange account. |
| Account Google |
Configure a Google account. |
| Account LDAP |
Configure a Lightweight Directory Access Protocol (LDAP) account. |
| Account Mail |
Configure a Mail account. |
| Configuration type |
Notes |
| Network DNS Proxy |
Beta. Configure a DNS proxy using a Network Extension app. |
| Network DNS Settings |
Beta. Configure encrypted DNS settings (DNS over HTTPS or TLS). |
| Network Relay |
Beta. Configure network relay servers to route traffic for specific domains. |
| Network VPN Always On |
Beta. Configure an Always On VPN that keeps the device continuously connected. |
| Network VPN IKEv2 |
Beta. Configure a VPN connection using the IKEv2 protocol. |
| Network VPN IPSec |
Beta. Configure a VPN connection using the IPSec protocol. |
| Network VPN Plugin |
Beta. Configure a VPN connection using a third-party VPN plugin or Network Extension provider. |
| Configuration type |
Notes |
| Security Certificate |
Add a certificate to the device. Can be paired with an asset — see DDM Assets. |
| Security Identity |
Install an identity on the device. |
| Passcode Settings |
Configure passcode policy settings. |
| Extensible SSO |
Beta. Configure Extensible Single Sign-On for apps and the platform. |
| Configuration type |
Notes |
| Software Update Settings |
Configure software updates. Required on iOS 27 in place of Legacy MDM software update management — see iOS 27 and Software Update Management. |
| Software Update Enforcement Specific |
A software update enforcement policy for a specific OS release. |
| Configuration type |
Notes |
| External Intelligence Settings |
Configure External Intelligence Integrations settings. Restricts external AI features — Siri AI, Visual Intelligence, and third-party AI extensions such as ChatGPT. Maps to Apple’s com.apple.configuration.external-intelligence.settings, introduced in iOS 27. |
| Intelligence Settings |
Configure Apple Intelligence settings. |
| Siri Settings |
Configure Siri settings. |
| Configuration type |
Notes |
| App Settings |
Beta. Configure app privacy permission defaults and allowed/denied app and binary lists. |
| Content Caching |
Beta. Configure the Content Caching service on macOS. |
| Safari Bookmarks |
Configure managed bookmarks in Safari. |
| Safari Extension Settings |
Configure Safari Extensions. |
| Safari Settings |
Configure Safari settings. |
| Web Content Filter Plugin |
Beta. Configure web content filtering using a third-party Network Extension plugin. |
| Configuration type |
Notes |
| Audio Accessory Settings |
Configure audio accessory settings. |
| Keyboard Settings |
Configure keyboard settings. |
| Math Settings |
Configure the math and calculator apps. |
| Configuration type |
Notes |
| Home Screen Layout |
Supervised only. Configure the Home Screen layout for the device — delivered as a legacy MDM profile declaration under the hood, a bridging mechanism for configurations without a native DDM equivalent yet. |
- This list reflects the picker as of today — Apple and CapaOne both add configuration types
over time. If a type you expect isn’t listed here, check the live picker at Apple →
Configurations → DDM → New.
- Not every configuration needs an asset — most types in this list are self-contained. Only
reach for DDM Assets when a configuration needs
to reference a credential, identity, or stored data.