# CertificatePreference The payload that configures a certificate preference. ``` object CertificatePreference ``` ## Discussion Specify `com.apple.security.certificatepreference` as the payload type. A `CertificatePreference` payload lets you identify a certificate preference item in the user’s keychain that references a certificate payload included in the same profile. It can only appear in a user profile, not a device profile. You can include multiple `CertificatePreference` payloads as needed. See also [`IdentityPreference`](/documentation/DeviceManagement/IdentityPreference) for information about setting up identity preferences. ### Profile availability ||| |--------------------------|-----| |Device channel |N/A | |User channel |macOS| |Allow manual install |macOS| |Requires supervision |N/A | |Requires user-approved MDM|N/A | |Allowed in user enrollment|macOS| |Allow multiple payloads |macOS| ### Profile example ```plist PayloadContent Password Password123 PayloadContent ExampleD PayloadIdentifier com.example.mypcertprefpayload PayloadType com.apple.security.certificatepreference PayloadUUID d669e184-6312-4214-9ebc-00346809f7f0 PayloadVersion 1 updated_at_xid 23387 PayloadDisplayName Certificate Preferences PayloadIdentifier com.example.profile PayloadType Configuration PayloadUUID 89d2e0a7-0821-45c2-a566-c23eb98b137e PayloadVersion 1 ``` --- Copyright © 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)