Tags Guide Part VI: AppleTV
Profiles for each device type are managed independently allowing separate configuration and management of profiles for each device type. When a device is provisioned, it will be provisioned with the profile configuration at the time the device was enrolled. When a profile change is made, new devices will receive the new configuration as well as devices that are currently managed and/or blocked. When any Profiles are changed, ensure the settings are correct as these will be applied immediately to all applicable devices. Please ensure you click on the Save or Save & Close button on the bottom right of the screen to commit your changes before selecting another page.
|Allow Remote Pairing||Enabled or Disabled||tvOS 10.2||If set to false, the AppleTV cannot be paired for use with the Remote App or Control Center widget|
|Allow iBookstore Erotica||Enabled or Disabled||tvOS 11.3||If set to false, the user will not be able to download media from Apple Books that has been tagged as erotica|
|Maximum Level of App Content allowed on the device||
||tvOS 11.3||This value defines the maximum level of app content that is allowed on the device|
|Maximum Level of Movie Content allowed on the device||
||tvOS 11.3||This value defines the maximum level of movie content that is allowed on the device|
|Maximum Level of TV Content allowed on the device||
||tvOS 11.3||This value defines the maximum level of TV content that is allowed on the device|
|*supervised devices only:|
|Allow Explicit Music or Video||Enabled or Disabled||tvOS 11.3||When false, explicit music or video content purchased from the iTunes Store is hidden. Explicit content is market as such by content providers, such as record labels, when sold through the iTunes Store|
|Allow Changing Device Name||Enabled or Disabled||tvOS 11.0||If set to false, prevents device name from being changed|
|Force Set Date and Time Automatically||Enabled or Disabled||tvOS 12.2||If set to true, the Date & Time "Set Automatically" features is turned on and can't be turned off by the users. Note: The device's time zone will only be updated when the device can determine its location|
|Allow Password Proximity Requests||Enabled or Disabled||tvOS 12||If set to false, a user's device will not request passwords from nearby devices|
|Allow Incoming AirPlay Requests||Enabled or Disabled||tvOS 10.2||If set to false, the Apple TV cannot be paired for use with the Remote app or Control Center widget.|
|Allow Device Sleeping||Enabled or Disabled||tvOS 13||If set to false, the Apple TV will not go to sleep.|
|Prevent Listed Bundle IDs From Being Shown or Launchable||e.g. com.apple.facetime||tvOS 11.0||If present, prevents listed bundle IDs from being shown or launchable. Include the value com.apple.webapp to blacklist all webclips|
|Allow Only Listed Bundle IDs To Be Shown or Launchable||e.g. com.apple.facetime||tvOS 11.0||If present, allows listed bundle IDs from being shown or launchable. Include the value com.apple.webapp to blacklist all webclips|
With the application lock profile, you can turn the device into a device that runs only one application. This feature is very useful in demonstration areas like promotion shops or roadshows to let users only use one specific application. Within the Application Lock profile, you can setup your desired App Identifier (Bundle ID) with additional options to Disable Touch (touch surface on the Apple TV Remote), Disable Auto Lock and Enable Voice Over. Upon receiving the profile, the home button is in a disabled state, and the device returns to the app automatically upon wake or restart. The feature is supported on supervised tvOS devices running version 10.2+.
|Application Lock||Enabled or Disabled||Enables the Application Lock profile|
|App Identifier||e.g., com.apple.TVMovies||Enter here the bundle id for the application that should run in the Single App Mode.|
|Disable Touch||Enabled or Disabled||Disables the touch surface on the Apple TV Remote.|
|Disable Auto Lock||Enabled or Disabled||Controls if the device doesn't automatically go to sleep after an idle period.|
|Enable Voice Over||Enabled or Disabled||Enables or Disables Voice Over.|
Silverback offers the ability to pre-populate multiple Wi-Fi Profile and settings on your devices, so the user does not need to know the password for these networks. If you having a WPA Enterprise protected network (e.g. with a RADIUS Server), please refer to WPA Enterprise Settings for additional information.
|Wi-Fi Settings||Enabled or Disabled||Enables the sending of Wi-Fi settings|
|SSID||e.g. Corporate Wi-Fi||Service Set Identifier of the wireless network|
||Defines the used Wireless network encryption|
|Hidden Network||Enabled or Disabled||Enable if the target network is not open or hidden|
|Automatically Join||Enabled or Disabled||The device will automatically join the Wi-Fi network|
|Password||e.g. Pa$$w0rd||Password for authenticating to the wireless network|
Ensures the device talks to the necessary Proxy
|Protocol Settings (only Enterprise)|
|Accepted EAP Types||
Defines the protocol utilized by encryption type
|Protected Access Credentials||
Defines the PAC configuration
|Authentication Settings (only Enterprise)|
|Username and Password||
Defines the used authentication mechanism
Defines the used authentication mechanism
Please refer to: Certification Authority Integration Guide for Certificate Based Authentication
|Allow Two Rands||Enabled or Disabled||Allow authenticating to server providing only two RAND values (EAP-SIM)|
|Trust Settings (only Enterprise)|
Defines the chain of trust
Global HTTP Proxy
Enabling the Global HTTP Proxy will force all Network Traffic through a designated proxy server.
|Global HTTP Proxy||Enabled or Disabled||Enables the Global HTTP proxy|
||Allows the administrator to select a proxy type|
|Server||e.g. http:// proxy.imagoverum.com or 192.168.0.101||The FQDN or IP address of the proxy server|
|Port||e.g. 80 or 443||The port of the proxy server|
|Individual Usernames||Enabled or Disabled||Controls the user ability to enter their own credentials|
|Username||e.g. Proxyuser||Allows the administrator to define the group username|
|Password||e.g. Pa$$w0rd||Allows the administrator to define the group password|
|PAC URL||e.g. http:// proxy.imagoverum.com/proxy.pac or 192.168.0.101/proxy.pac||Allows the administrator to specify the location of the PAC script|
The AirPlay Security payload locks the Apple TV to a particular style of AirPlay Security.
|AirPlay Security||Enabled or Disabled||Enables or disables the profile|
|Profile Name||e.g. AirPlay||Defines the profile name|
Any allows connections from both Ethernet/WiFi and AWDL.
WiFi only allows connections only from devices on the same Ethernet/WiFi network as the Apple TV.
Passcode once will require an on-screen passcode to be entered on the first connection from a device. Subsequent connections from the same device will not be prompted.
Passcode always will require an on-screen passcode to be entered upon every AirPlay connection.
Password will require a passphrase to be entered as specified in the Password key.
This profile allows restricting the connections from the Apple TV Remote app to an Apple TV and restricting the available Apple TV devices in the Apple TV Remote app. Press + to add devices or - to remove listed devices.
|TV Remote||Enabled or Disabled||Enables or disables the profile|
|Name||e.g. TV Remote||Defines the profile name|
|Allowed remote devices||e.g. 14:20:5e:6f:16:d5||Displays all allowed devices|
Conference Room Display
If you are using an Apple TV in a business setup or in any classroom, Silverback helps you to set the Conference Room Display mode remotely on any AppleTV device. Instead of showing the home screen of the Apple TV, with Silverback you can add instructions for how to connect via AirPlay. This will help to ensure an easy and convenient connection to an AppleTV from other Apple devices.
|Conference Room Display||Enabled or Disabled||Enables or disables the profile|
|Name||e.g. Conference Room||Defines the profile name|
|Message||e.g. On your Smartphone, Tablet or MacBook choose Screen Mirroring and select the Apple TV||This message will be displayed on the Apple TV Conferece Room display.|
Custom Profiles can be created with the Apple Configurator 2 on a MacOS device and imported into Silverback.
Use Custom Profiles if you miss a setting or a configuration that Silverback does not covers, but has an availability in Apple Configurator 2.
- Click New Custom Profile
|Name||e.g. AppleTVRemote||Display Name for the Custom Profile|
|Description||e.g. AppleTVRemote||Description for the Custom Profile|
|Mobileconfig File||Choose File||Uploads the *.mobileconfig file|
Home Screen Layout
Please refer to: iOS Guide VII: Add your Home Screen Layout