AppleTV tvOS VPN and Secure DNS Profiles

AppleTV tvOS 17+ VPN Profiles (mobileconfig) with support of IKEv2 IPSec PPP L2TP PPTP and Secure DNS-over-TLS/QUIC and DNS-over-HTTPS

Releases

⚡️ Coming Soon ⚡️

Goals

• VPN Profiles for protocols: com.apple.vpn.managed
  • IKEv2 ✅ (tested, works)
  • IPSec
  • PPP
  • L2TP
  • PPTP
  • WireGuard
• Secure DNS Settings com.apple.dnsSettings.managed.yaml
  • DNS-over-TLS/QUIC
  • DNS-over-HTTPS ✅ (tested, works)
• Secure DNS over VPN ❌ (tested, doesn't work, not supported?)

  Apple's documentation says it is supported on tvOS 17+ but it doesn't install and in the mdm profile yaml tvOS doesn't seem to be listed (only iOS and macOS) which contradicts their docs

Documentation

Apple Official Device Management spec

• https://github.com/apple/device-management/blob/release/mdm/profiles/com.apple.vpn.managed.yaml

Apple Official VPN tvOS 17+ Documentation

• ✅ https://developer.apple.com/documentation/devicemanagement/vpn
• ✅ https://developer.apple.com/documentation/devicemanagement/vpn/ikev2
• ❌ https://developer.apple.com/documentation/devicemanagement/vpn/dns
  • Do VPN DNS settings work in tvOS 17+? Couldn't make work, profile doesn't install if set

Other Official Reference

• https://support.apple.com/guide/deployment/ikev2-settings-dep4ce9487d/web

Profile Generation Tooling

• Apple Configurator 2
• iMazing Profile Editor
• https://github.com/timsutton/make-profile-pkg

Guides

• TODO: Add OS Repo tool
• https://imazing.com/guides/how-to-create-or-edit-apple-configuration-profiles
• https://imazing.com/guides/apple-device-management-glossary#mdm

Public Dicussions

• https://www.reddit.com/r/appletv/comments/14y5bk1/public_beta_and_vpn_works/
• https://www.reddit.com/r/appletv/comments/16sglky/why_is_it_taking_so_long_for_the_big_guys_to/

Learning

• https://www.cloudflare.com/learning/dns/dns-over-tls/

Licensing

MIT 2023 Gaston Morixe