Ensure 'Allow iCloud Keychain' is set to 'Disabled'


This recommendation pertains to iCloud performing Keychain synchronization.

It is normal and expected for end-users to attach their personal iCloud account onto institutionally owned devices. Because of this, iCloud Keychain presents an unnecessary risk to institutional credentials because they may be shared onto jailbroken or otherwise compromised devices.


1. Open Apple Configurator.
2. Open the Configuration Profile.
3. In the left windowpane, click on the Restrictions tab.
4. In the right windowpane, under the tab Functionality, uncheck the checkbox for Allow iCloud Keychain.
5. Deploy the Configuration Profile.

See Also