创建 macOSPkcsCertificateProfile

项目
07/03/2024

命名空间：microsoft.graph

重要： Microsoft /beta 版本下的 Graph API 可能会发生更改;不支持生产使用。

注意：适用于 Intune 的 Microsoft Graph API 需要适用于租户的活动 Intune 许可证。

全局服务	美国政府 L4	美国政府 L5 (DOD)	由世纪互联运营的中国
✅	✅	✅	✅

权限

要调用此 API，需要以下权限之一。若要了解详细信息，包括如何选择权限的信息，请参阅权限。

权限类型	权限（从最低特权到最高特权）
委派（工作或学校帐户）	DeviceManagementConfiguration.ReadWrite.All
委派（个人 Microsoft 帐户）	不支持。
应用程序	DeviceManagementConfiguration.ReadWrite.All

HTTP 请求

POST /deviceManagement/deviceConfigurations
POST /deviceManagement/deviceConfigurations/{deviceConfigurationId}/microsoft.graph.windowsDomainJoinConfiguration/networkAccessConfigurations

请求标头

标头	值
Authorization	持有者 {token}。必填。详细了解身份验证和授权。
接受	application/json

请求正文

在请求正文中，提供 macOSPkcsCertificateProfile 对象的 JSON 表示形式。

下表显示了创建 macOSPkcsCertificateProfile 时所需的属性。

属性	类型	说明
id	String	实体的键。继承自 deviceConfiguration
lastModifiedDateTime	DateTimeOffset	上次修改对象的日期/时间。继承自 deviceConfiguration
roleScopeTagIds	字符串集合	此实体实例的范围标记列表。继承自 deviceConfiguration
supportsScopeTags	布尔值	指示基础设备配置是否支持分配范围标记。如果此值为 false，并且实体对限定范围的用户不可见，则不允许向 ScopeTags 属性分配。这发生在 Silverlight 中创建的旧策略，可以通过在 Azure 门户中删除并重新创建策略来解决。此属性是只读的。继承自 deviceConfiguration
deviceManagementApplicabilityRuleOsEdition	deviceManagementApplicabilityRuleOsEdition	此策略的 OS 版本适用性。继承自 deviceConfiguration
deviceManagementApplicabilityRuleOsVersion	deviceManagementApplicabilityRuleOsVersion	此策略的 OS 版本适用性规则。继承自 deviceConfiguration
deviceManagementApplicabilityRuleDeviceMode	deviceManagementApplicabilityRuleDeviceMode	此策略的设备模式适用性规则。继承自 deviceConfiguration
createdDateTime	DateTimeOffset	创建对象的日期/时间。继承自 deviceConfiguration
description	String	管理员提供的设备配置的说明。继承自 deviceConfiguration
displayName	String	管理员提供的设备配置的名称。继承自 deviceConfiguration
version	Int32	设备配置的版本。继承自 deviceConfiguration
renewalThresholdPercentage	Int32	证书续订阈值百分比。继承自 macOSCertificateProfileBase
subjectNameFormat	appleSubjectNameFormat	证书使用者名称格式。继承自 macOSCertificateProfileBase。可取值为：`commonName`、`commonNameAsEmail`、`custom`、`commonNameIncludingEmail`、`commonNameAsIMEI`、`commonNameAsSerialNumber`。
subjectAlternativeNameType	subjectAlternativeNameType	证书使用者可选名称类型。继承自 macOSCertificateProfileBase。可取值为：`none`、`emailAddress`、`userPrincipalName`、`customAzureADAttribute`、`domainNameService`、`universalResourceIdentifier`。
certificateValidityPeriodValue	Int32	证书有效期的值。继承自 macOSCertificateProfileBase
certificateValidityPeriodScale	certificateValidityPeriodScale	缩放证书有效期。继承自 macOSCertificateProfileBase。可取值为：`days`、`months`、`years`。
certificationAuthority	String	PKCS 证书颁发机构 FQDN。
certificationAuthorityName	String	PKCS 证书颁发机构名称。
certificateTemplateName	String	PKCS 证书模板名称。
subjectAlternativeNameFormatString	String	定义使用者可选名称的格式字符串。
subjectNameFormatString	String	定义使用者名称的格式字符串。示例：CN={{EmailAddress}}，E={{EmailAddress}}，OU=企业用户，O=Contoso Corporation，L=Redmond，ST=WA，C=US
certificateStore	certificateStore	目标存储证书。可取值为：`user`、`machine`。
customSubjectAlternativeNames	customSubjectAlternativeName 集合	自定义使用者可选名称设置。该集合最多可包含 500 个元素。
allowAllAppsAccess	布尔值	AllowAllAppsAccess 设置
deploymentChannel	appleDeploymentChannel	指示用于部署配置文件的部署通道类型。可能的值为 deviceChannel、userChannel。可取值为：`deviceChannel`、`userChannel`、`unknownFutureValue`。

响应

如果成功，此方法在 201 Created 响应正文中返回响应代码和 macOSPkcsCertificateProfile 对象。

示例

请求

下面是一个请求示例。

POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations
Content-type: application/json
Content-length: 1896

{
  "@odata.type": "#microsoft.graph.macOSPkcsCertificateProfile",
  "roleScopeTagIds": [
    "Role Scope Tag Ids value"
  ],
  "supportsScopeTags": true,
  "deviceManagementApplicabilityRuleOsEdition": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsEdition",
    "osEditionTypes": [
      "windows10EnterpriseN"
    ],
    "name": "Name value",
    "ruleType": "exclude"
  },
  "deviceManagementApplicabilityRuleOsVersion": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsVersion",
    "minOSVersion": "Min OSVersion value",
    "maxOSVersion": "Max OSVersion value",
    "name": "Name value",
    "ruleType": "exclude"
  },
  "deviceManagementApplicabilityRuleDeviceMode": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleDeviceMode",
    "deviceMode": "sModeConfiguration",
    "name": "Name value",
    "ruleType": "exclude"
  },
  "description": "Description value",
  "displayName": "Display Name value",
  "version": 7,
  "renewalThresholdPercentage": 10,
  "subjectNameFormat": "commonNameAsEmail",
  "subjectAlternativeNameType": "emailAddress",
  "certificateValidityPeriodValue": 14,
  "certificateValidityPeriodScale": "months",
  "certificationAuthority": "Certification Authority value",
  "certificationAuthorityName": "Certification Authority Name value",
  "certificateTemplateName": "Certificate Template Name value",
  "subjectAlternativeNameFormatString": "Subject Alternative Name Format String value",
  "subjectNameFormatString": "Subject Name Format String value",
  "certificateStore": "machine",
  "customSubjectAlternativeNames": [
    {
      "@odata.type": "microsoft.graph.customSubjectAlternativeName",
      "sanType": "emailAddress",
      "name": "Name value"
    }
  ],
  "allowAllAppsAccess": true,
  "deploymentChannel": "userChannel"
}

响应

下面是一个响应示例。注意：为简洁起见，可能会截断此处显示的响应对象。将从实际调用中返回所有属性。

HTTP/1.1 201 Created
Content-Type: application/json
Content-Length: 2068

{
  "@odata.type": "#microsoft.graph.macOSPkcsCertificateProfile",
  "id": "4b489237-9237-4b48-3792-484b3792484b",
  "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
  "roleScopeTagIds": [
    "Role Scope Tag Ids value"
  ],
  "supportsScopeTags": true,
  "deviceManagementApplicabilityRuleOsEdition": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsEdition",
    "osEditionTypes": [
      "windows10EnterpriseN"
    ],
    "name": "Name value",
    "ruleType": "exclude"
  },
  "deviceManagementApplicabilityRuleOsVersion": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsVersion",
    "minOSVersion": "Min OSVersion value",
    "maxOSVersion": "Max OSVersion value",
    "name": "Name value",
    "ruleType": "exclude"
  },
  "deviceManagementApplicabilityRuleDeviceMode": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleDeviceMode",
    "deviceMode": "sModeConfiguration",
    "name": "Name value",
    "ruleType": "exclude"
  },
  "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
  "description": "Description value",
  "displayName": "Display Name value",
  "version": 7,
  "renewalThresholdPercentage": 10,
  "subjectNameFormat": "commonNameAsEmail",
  "subjectAlternativeNameType": "emailAddress",
  "certificateValidityPeriodValue": 14,
  "certificateValidityPeriodScale": "months",
  "certificationAuthority": "Certification Authority value",
  "certificationAuthorityName": "Certification Authority Name value",
  "certificateTemplateName": "Certificate Template Name value",
  "subjectAlternativeNameFormatString": "Subject Alternative Name Format String value",
  "subjectNameFormatString": "Subject Name Format String value",
  "certificateStore": "machine",
  "customSubjectAlternativeNames": [
    {
      "@odata.type": "microsoft.graph.customSubjectAlternativeName",
      "sanType": "emailAddress",
      "name": "Name value"
    }
  ],
  "allowAllAppsAccess": true,
  "deploymentChannel": "userChannel"
}

通过

创建 macOSPkcsCertificateProfile

权限

HTTP 请求

请求标头

请求正文

响应

示例

请求

响应

反馈

其他资源