Apple iPod and iPod Touch manual Passcode Policy Payload

Passcode Policy Payload

The Passcode Policy payload is designated by the com.apple.mobiledevice.passwordpolicy PayloadType value. The presence of this payload type prompts iPhone to present the user with an alphanumeric passcode entry mechanism, which allows the entry of arbitrarily long and complex passcodes.

In addition to the settings common to all payloads, this payload defines the following:

Key	Value
allowSimple	Boolean, optional. Default YES. Determines whether a simple
	passcode is allowed. A simple passcode is defined as containing
	repeated characters, or increasing/decreasing characters (such
	as 123 or CBA). Setting this value to “NO” is synonymous to
	setting minComplexChars to “1”.
forcePIN	Boolean, optional. Default NO. Determines whether the user is
	forced to set a PIN. Simply setting this value (and not others)
	forces the user to enter a passcode, without imposing a length
	or quality.
maxFailedAttempts	Number, optional. Default 11. Allowed range [2...11]. Specifies the
	number of allowed failed attempts to enter the passcode at the
	iPhone lock screen. Once this number is exceeded, the device is
	locked and must be connected to its designated iTunes in order
	to be unlocked.
maxInactivity	Number, optional. Default Infinity. Specifies the number of days
	for which the device can be idle (without being unlocked by the
	user) before it is locked by the system. Once this limit is reached,
	the device is locked and the passcode must be entered.
maxPINAgeInDays	Number, optional. Default Infinity. Specifies the number of days
	for which the passcode can remain unchanged. After this
	number of days, the user is forced to change the passcode
	before the device is unlocked.
minComplexChars	Number, optional. Default 0. Specifies the minimum number of
	complex characters that a passcode must contain. A “complex”
	character is a character other than a number or a letter, such as
	&%$#.
minLength	Number, optional. Default 0. Specifies the minimum overall
	length of the passcode. This parameter is independent of the
	also optional minComplexChars argument.
requireAlphanumeric	Boolean, optional. Default NO. Specifies whether the user must
	enter alphabetic characters (“abcd”), or if numbers are sufficient.

Appendix B Configuration Profile Format

51