diff options
Diffstat (limited to 'chromium/docs/website/site/administrators/ios-mdm-policy-format/index.md')
| -rw-r--r-- | chromium/docs/website/site/administrators/ios-mdm-policy-format/index.md | 180 |
1 files changed, 0 insertions, 180 deletions
diff --git a/chromium/docs/website/site/administrators/ios-mdm-policy-format/index.md b/chromium/docs/website/site/administrators/ios-mdm-policy-format/index.md deleted file mode 100644 index 3cf3bcb902c..00000000000 --- a/chromium/docs/website/site/administrators/ios-mdm-policy-format/index.md +++ /dev/null @@ -1,180 +0,0 @@ ---- -breadcrumbs: -- - /administrators - - Documentation for Administrators -page_name: ios-mdm-policy-format -title: iOS MDM Policy Format ---- - -Policy Support on Chrome on iOS is being removed in Chrome 48 as part of -Chrome's move to WKWebView where supporting many of the policies was not -possible. - -Policies can be configured for Chrome on iOS via MDM starting with version 35. - -The iOS device must be enrolled for Mobile Device Management (MDM) with an MDM -vendor to enable this feature. This page documents the format of the managed app -configuration settings that Chrome expects, and is meant to help MDM vendors -integrate Chrome management into their solutions. - -This uses the managed app configuration API introduced in iOS 7, and only work -with device running iOS 7 or later. For an introduction to the API see session -301 from WWDC 2013, "Extending Your Apps for Enterprise and Education Use", at -<https://developer.apple.com/videos/wwdc/2013/?id=301>. - -#### Keys loaded by Chrome - -The managed app configuration pushed to Chrome should be an NSDictionary, -encoded as a <dict> element in the Plist format. Chrome then looks for 2 -keys in this dictionary: - -* **ChromePolicy** is the main key to configure policies for Chrome. - This key must map to another NSDictionary, which then maps a Chrome - policy to its value. - -* **EncodedChromePolicy** is a fallback key which is loaded only if - ChromePolicy is not present. This key supports the same policies but - its value should be a single NSString (encoded as a <string> - on the wire), which contains a serialized Plist encoded in Base64. - -ChromePolicy is the recommended key to configure Chrome. EncodedChromePolicy may -be used by legacy products that are limited to String values. As of version 35 -Chrome doesn't load any other keys; new keys may be introduced in future -versions. - -#### Example ChromePolicy - -This example contains the full Plist that can be set down as the managed app -configuration for Chrome: - -``` -<?xml version="1.0" encoding="UTF-8"?> -<!DOCTYPE plist PUBLIC '-//Apple//DTD PLIST 1.0//EN' 'http://www.apple.com/DTDs/PropertyList-1.0.dtd'> -<plist version="1.0"> - <dict> - <key>ChromePolicy</key> - <dict> - <key>AutoFillEnabled</key> - <false/> - <key>CookiesAllowedForUrls</key> - <array> - <string>http://www.example.com</string> - <string>[*.]example.edu</string> - </array> - <key>CookiesBlockedForUrls</key> - <array> - <string>http://www.example.com</string> - <string>[*.]example.edu</string> - </array> - <key>CookiesSessionOnlyForUrls</key> - <array> - <string>http://www.example.com</string> - <string>[*.]example.edu</string> - </array> - <key>DefaultCookiesSetting</key> - <integer>1</integer> - <key>DefaultPopupsSetting</key> - <integer>1</integer> - <key>DefaultSearchProviderEnabled</key> - <true/> - <key>DefaultSearchProviderKeyword</key> - <string>mis</string> - <key>DefaultSearchProviderName</key> - <string>My Intranet Search</string> - <key>DefaultSearchProviderSearchURL</key> - <string>http://search.my.company/search?q={searchTerms}</string> - <key>ManagedBookmarks</key> - <array> - <dict> - <key>name</key> - <string>Google</string> - <key>url</key> - <string>google.com</string> - </dict> - <dict> - <key>name</key> - <string>Youtube</string> - <key>url</key> - <string>youtube.com</string> - </dict> - </array> - <key>PasswordManagerEnabled</key> - <true/> - <key>PopupsAllowedForUrls</key> - <array> - <string>http://www.example.com</string> - <string>[*.]example.edu</string> - </array> - <key>PopupsBlockedForUrls</key> - <array> - <string>http://www.example.com</string> - <string>[*.]example.edu</string> - </array> - <key>ProxyBypassList</key> - <string>http://www.example1.com,http://www.example2.com,http://internalsite/</string> - <key>ProxyMode</key> - <string>direct</string> - <key>ProxyPacUrl</key> - <string>http://internal.site/example.pac</string> - <key>ProxyServer</key> - <string>123.123.123.123:8080</string> - <key>SearchSuggestEnabled</key> - <true/> - <key>TranslateEnabled</key> - <true/> - <key>URLBlocklist</key> - <array> - <string>example.com</string> - <string>https://ssl.server.com</string> - <string>hosting.com/bad_path</string> - <string>http://server:8080/path</string> - <string>.exact.hostname.com</string> - </array> - <key>URLAllowlist</key> - <array> - <string>example.com</string> - <string>https://ssl.server.com</string> - <string>hosting.com/bad_path</string> - <string>http://server:8080/path</string> - <string>.exact.hostname.com</string> - </array> - </dict> - </dict> -</plist> -``` - -#### Example EncodedChromePolicy - -This example contains an EncodedChromePolicy value that contains the same Plist -as above, after being encoded in Base64: - -``` -<?xml version="1.0" encoding="UTF-8"?> -<!DOCTYPE plist PUBLIC '-//Apple//DTD PLIST 1.0//EN' 'http://www.apple.com/DTDs/PropertyList-1.0.dtd'> -<plist version="1.0"> - <dict> - <key>EncodedChromePolicy</key> - <string>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</string> - </dict> -</plist> -``` - -#### Verifying a Plist - -A .plist file can be verified with the plutil command on Mac OS X: - -``` -plutil -lint file.plist -``` - -The EncodedChromePolicy value should decode correctly as Base64: - -``` -base64 < encoded.txt > decoded.plist -plutil -lint decoded.plist -``` - -#### Policies supported by Chrome on iOS - -The page at <https://chromeenterprise.google/policies/> indicates -which platforms are supported for each policy. |