# DDM (Apple)

Declarative Device Management (DDM) is an advanced framework introduced by Apple to enhance the management of iOS, iPadOS, and macOS devices. Unlike traditional device management methods, DDM allows devices to proactively apply configurations and policies based on declarations provided by administrators or IT departments. These declarations define the desired state of the device, enabling it to autonomously enforce settings and make adjustments without constant communication with a management server. DDM can manage various aspects of device configuration, including account setups, security policies, app management, and compliance enforcement. By utilizing a more device-centric approach, DDM reduces network traffic and server load, allowing for more efficient and scalable device management. This framework provides organizations with a dynamic and responsive way to ensure devices remain configured correctly and adhere to organizational policies, even in changing environments or when devices are offline.

# Apple Device Management - DDM Assets

## What

DDM Assets let you define reusable values for Apple Declarative Device Management configurations. Use them for shared settings such as credentials, server details, certificates, or other data that more than one DDM configuration needs. Instead of copying the same value into each configuration, reference the Asset and update it in one place.

[![image.png](https://kb.filewave.com/uploads/images/gallery/2025-04/scaled-1680-/uDryIhsW7d2jRTIc-image.png)](https://kb.filewave.com/uploads/images/gallery/2025-04/uDryIhsW7d2jRTIc-image.png)

[![image.png](https://kb.filewave.com/uploads/images/gallery/2025-04/scaled-1680-/Ll2QM2K9DPkdj6mg-image.png)](https://kb.filewave.com/uploads/images/gallery/2025-04/Ll2QM2K9DPkdj6mg-image.png)

## When/Why

Use Assets when multiple DDM configurations need the same value, when one update should flow to every configuration that references it, or when Fileset organization and permissions should control who can manage shared DDM data.

This is useful for standardized environments where many devices need the same settings, such as schools or organizations with shared Wi-Fi, account, certificate, or service configuration.

DDM Assets and Configurations are supported on devices running iOS 15, iPadOS 15, macOS 12 Monterey, or later.

## How

To create and use Assets:

1. **Create an Asset:** Create a new Fileset and choose **DDM Asset** from the Apple section.
2. **Configure the Asset:** Define the reusable settings, such as credentials, server addresses, certificates, or other supported values.
3. **Reference the Asset in a DDM Configuration:** Create or edit a DDM Configuration by creating a Fileset and choosing **DDM Configuration** from the Apple section. In settings that support Assets, add a reference to the Asset. For example, a CalDAV configuration can use authentication credentials from a DDM Asset.
4. **Deploy to devices:** Assign the configurations that reference the Assets to your devices or device groups, then monitor the deployment to confirm that devices receive both the configuration and the associated Assets.

When a configuration references an Asset, FileWave manages that Asset as a dependency. Deploying the configuration also deploys the associated Asset to the target devices.

## Related Content

- [Apple’s Declarative Device Management Documentation](https://developer.apple.com/business/documentation/MDM-Protocol-Reference.pdf)

## Digging Deeper

Assets are most useful when a value is shared, changes occasionally, and should stay consistent everywhere it is used. Updating the Asset once keeps dependent configurations aligned without editing each configuration separately.

Permissions and Fileset organization also apply to Assets, so teams can manage shared configuration data with the same structure they use for other Filesets.

# Apple Device Management - DDM Configurations

## What

**Device Declarative Management (DDM)** is Apple’s modern approach to device management, introduced to enhance and eventually replace traditional Mobile Device Management (MDM) protocols. With **FileWave 15.5**, support for **DDM configurations** is now available, allowing administrators to manage Apple devices more efficiently. DDM shifts some management logic to the device, enabling it to proactively apply configurations and report status updates, reducing server load and improving scalability.

[![image.png](https://kb.filewave.com/uploads/images/gallery/2025-04/scaled-1680-/MejbHGRvyc3P2fZ2-image.png)](https://kb.filewave.com/uploads/images/gallery/2025-04/MejbHGRvyc3P2fZ2-image.png)

<p class="callout info">DDM options will be gradually extended over following FileWave versions, gradually providing a broader scope of offerings. The screenshots in this KB are from FileWave 16.x</p>

## When/Why

Implement **DDM Configurations** in FileWave 15.5 when you aim to:

- **Modernize Device Management**: Adopt Apple’s latest device management methodology to stay current with industry advancements.
- **Increase Efficiency**: Allow devices to autonomously manage configurations, reducing reliance on constant server communication.
- **Enhance Scalability**: Improve performance when managing large fleets, as devices handle more processing locally.
- **Improve Responsiveness**: Devices can apply configurations and respond to changes more quickly without waiting for server commands.

This is particularly useful for organizations managing numerous devices, seeking to optimize performance and reduce overhead.

<p class="callout info">DDM Assets &amp; Configurations are supported on devices running the following versions and above: **iOS 15**, **iPadOS 15**, **macOS 12 Monterey.**</p>

<p class="callout info">Starting in FileWave 16.3.x, mixed DDM/MDM deployments are handled more cleanly. DDM Configurations are not Apple Profile Filesets, and Apple Profiles still install through MDM. Command Policy Filesets are also excluded from DDM installation and sent as their corresponding MDM commands during deployment.</p>

<p class="callout info">Starting in FileWave 16.3.x, the **Service Configuration Files** editor includes additional built-in services: `com.apple.cryptoTokenKit` and `com.apple.authorization`.</p>

## How

To create and use **Configurations** in **FileWave 15.5**:

1. <span class="s1"> </span>**Create a Configuration**: 
    - Create a new Fileset and pick **DDM Configuration** from the **Apple** section. [![image.png](https://kb.filewave.com/uploads/images/gallery/2025-04/scaled-1680-/IPWxLFYkWXs4pGyr-image.png)](https://kb.filewave.com/uploads/images/gallery/2025-04/IPWxLFYkWXs4pGyr-image.png)
2. **Configure the Configuration**: 
    - Pick the desired Configuration
3. **Reference a DDM Asset in DDM Configurations**: 
    - Some Configurations can reference **[Apple Device Management - DDM Assets](https://kb.filewave.com/books/ddm-apple/page/apple-device-management-ddm-assets "Apple Device Management - DDM Assets")**. An example is the **Account: CalDAV** Configuration which can be fed credentials from a **DDM Asset** (configured with the DDM Asset Editor) [![image.png](https://kb.filewave.com/uploads/images/gallery/2025-04/scaled-1680-/46dDMf3gtUHKc4y4-image.png)](https://kb.filewave.com/uploads/images/gallery/2025-04/46dDMf3gtUHKc4y4-image.png)
4. **Automatic Dependency Handling**: 
    - When a configuration references an Asset, FileWave automatically manages the Asset as a dependency.
    - Deploying the configuration will also deploy the associated Asset to the target devices.
5. **Deploy to Devices**: 
    - Assign the configurations to your devices or device groups.
    - Monitor the deployment to ensure that devices receive both the configuration and the associated Assets.

### Fileset Status

Unlike Profiles, DDM configurations are deployed with one single DDM command, meaning the Client Info &gt; Command History tab will not show individual events per DDM configuration delivered.

Starting in FileWave 16.3.x, **Client Info &gt; Fileset Status** provides more detailed status information for **multi-configuration DDM Filesets**. For example, a Fileset such as **Screen Sharing Configuration** can contain multiple DDM configurations, and each one can now report its own status within the Fileset Status view. This makes it much easier to see which specific configuration succeeded or failed during deployment.

This detailed DDM status is shown in the same area used for Script status, because scripts and DDM configurations cannot coexist within the same Fileset. Single-configuration DDM Filesets are not changed by this behavior.

Likewise, when viewing the installed Profiles on a device, the DDM Configurations will not show as Profiles, but, instead, within the FileWave MDM Configuration Profile. Accessing the Profile list from Settings of a device, open the FileWave MDM Configuration Profile and scroll down to Device Declarations:

[![image.png](https://kb.filewave.com/uploads/images/gallery/2025-04/scaled-1680-/834mj9bfZbR77g4G-image.png)](https://kb.filewave.com/uploads/images/gallery/2025-04/834mj9bfZbR77g4G-image.png)

In the above example, opening Global Settings should reflect the settings delivered by Apple DDM Configuration Filesets. For example:

[![image.png](https://kb.filewave.com/uploads/images/gallery/2025-04/scaled-1680-/6nG32vjX609SRuwr-image.png)](https://kb.filewave.com/uploads/images/gallery/2025-04/6nG32vjX609SRuwr-image.png)

## Related Content

- [Apple’s Declarative Device Management Documentation](https://developer.apple.com/business/documentation/MDM-Protocol-Reference.pdf)

## Digging Deeper

**Declarative Device Management (DDM)** represents a significant evolution in Apple’s device management strategy:

- **Device-Centric Management**: Devices receive declarations of desired states and autonomously ensure compliance, reducing the need for continuous server commands.
- **Enhanced Performance**: Offloading processing to devices improves performance and scalability, especially in large environments.
- **Improved Reliability**: Devices can enforce configurations even when temporarily disconnected from the management server.

**Key Benefits**:

- **Reduced Server Load**: Servers are less burdened with managing individual device states, as devices handle more tasks independently.
- **Faster Configuration Application**: Devices can apply changes immediately upon receiving declarations, without waiting for additional instructions.
- **Proactive Compliance**: Devices continuously ensure they meet the declared state, self-correcting if configurations are altered or removed.

By embracing DDM configurations in FileWave 15.5, organizations can achieve a more efficient, scalable, and responsive device management system that meets the demands of modern IT environments.

**Conflicting Payloads:**

Apple have not provided any alternate information, from MDM Payloads, regarding the experience if two DDM configurations are applied to control the same feature, but with differing settings. Please consider the following:

- Where MDM Payloads are concerned, Apple suggest the experience is undefined. 
    - [Plan your configuration profiles for Apple devices](https://support.apple.com/en-gb/guide/deployment/dep9a318a393/web)
- Apple used to have an additional clause, suggesting that where restrictions payloads conflicted, the more restrictive setting would win (but this detail was removed from their documentation).
- It would be reasonable to assume that the same conditions apply to DDM.

For what it is worth, testing the conflict between MDM and DDM for a restriction provided the following result:

- Set differing macOS Software Update defer durations in both MDM and DDM payloads.
- Associate both.
- In each test, the most restrictive (greatest duration of days) appeared to always be applied.
- It did not matter if DDM or MDM was the more restrictive.

<p class="callout info">In would be sensible to avoid conflicts where possible, rather than rely on a tested experience.</p>

# Battery Health Inventory Field

## What

FileWave v16.2.0+ now reports <span class="s2">**Battery Health**</span> as an inventory field for supported iPads and Macs. This value comes directly from Apple’s device management framework and can help administrators quickly identify whether a device battery is functioning properly, requires service, or is using a non-genuine replacement.

The possible values are:

- <span class="s1">**Normal**</span> – Battery is functioning within expected parameters.
- <span class="s1">**Non-Genuine**</span> – Battery replacement detected that is not Apple-certified.
- <span class="s1">**Service-Recommended**</span> – Battery requires servicing due to degradation or fault.
- <span class="s1">**Unknown**</span> – Device could not determine battery status.
- <span class="s1">**Unsupported**</span> – Device does not support reporting battery health.

<p class="callout info"><span class="platform"><span title="Available on iOS 17.0 and later">To get a value of anything other than Unsupported you would need iOS 17.0+, i</span></span><span class="platform"><span title="Available on iPadOS 17.0 and later">PadOS 17.0+, or </span></span><span class="platform"><span title="Available on macOS 14.4 and later">macOS 14.4+ and for iPads it was added to higher end iPads at the end of 2024 and all iPads in 2025. </span></span></p>

## When/Why

Battery health information is crucial for organizations managing fleets of iPads or Macs where device longevity, service costs, and user experience depend on reliable battery performance.

- <span class="s1">**When**</span>: Use this field during device audits, lifecycle management, or when troubleshooting performance and uptime issues.
- <span class="s1">**Why**</span>: It helps IT teams proactively schedule repairs or replacements, avoid downtime, and distinguish between genuine vs. non-genuine repairs.

## How

1. Open the <span class="s1">**FileWave Central Console**</span> and locate the target device.
2. Navigate to the <span class="s1">**Client Info**</span> window.
3. Select the <span class="s1">**Device Details**</span> tab (or search for “Battery Health” in the search bar).
4. Review the reported <span class="s1">**Battery Health**</span> value.
    
    
    - For unsupported devices, the value will display as <span class="s1">**Unsupported**</span>.
    - Supported iPads and Macs will show one of the Apple-defined statuses.

<p class="callout info">💡 <span class="s2">**Support Note**</span>: According to [Apple’s documentation](https://support.apple.com/en-us/117759), battery health reporting is currently available on higher-end <span class="s2">**2024 models**</span> and <span class="s2">**all 2025 iPad/Mac models**</span>.</p>

[![FileWave Admin 2025-09-18 11.07.22.png](https://kb.filewave.com/uploads/images/gallery/2025-09/scaled-1680-/LyAtTLXJRtmJwS5X-filewave-admin-2025-09-18-11-07-22.png)](https://kb.filewave.com/uploads/images/gallery/2025-09/LyAtTLXJRtmJwS5X-filewave-admin-2025-09-18-11-07-22.png)

#### **Smart Group Example: Devices Needing Battery Service**

To automatically identify devices that require attention:

1. <span class="s1">In the </span>**FileWave Central Console**<span class="s1">, create a new </span>**Smart Group**<span class="s1">.</span>
2. Add a filter with:
    
    
    - <span class="s1">**Property**</span><span class="s2">: </span>Battery Health
    - **Operator**<span class="s1">: </span><span class="s2">equals</span>
    - <span class="s1">**Value**</span><span class="s2">: </span>Service-Recommended
3. Save the Smart Group.

This group will dynamically collect all devices with failing batteries so administrators can schedule replacements or repairs.

## Related Content

- [Apple: Check iPad battery health](https://support.apple.com/en-us/117759)
- [Apple Developer Documentation – Battery Health Status](https://developer.apple.com/documentation/devicemanagement/statusdevicebatteryhealth)

## Digging Deeper

- FileWave does not calculate battery health; it simply displays the status as reported by the device.
- In environments with mixed device generations, you may see a mix of <span class="s1">**Normal**</span> and <span class="s1">**Unsupported**</span> values, depending on hardware.
- For long-term fleet management, admins may consider building a <span class="s1">**Smart Group**</span> that collects devices with <span class="s2">Battery Health = Service-Recommended</span> to streamline service workflows.

# DDM Configuration - Restricting Math Results in Other Apps with FileWave

## Restricting Math Results in Other Apps with FileWave

With iOS 18 and macOS 15, Apple introduced new controls for managing <span class="s2">**Math Notes**</span> and related behaviors across apps. FileWave allows you to configure these restrictions through the <span class="s2">**Apple DDM Configuration Editor**</span>.

![image.png](https://kb.filewave.com/uploads/images/gallery/2025-09/scaled-1680-/WGkebffejOk4zGlb-image.png)

## Steps to Configure

1. In FileWave Admin, go to:
    
    **New Fileset → Apple → DDM Configuration:**
    
    [![image.png](https://kb.filewave.com/uploads/images/gallery/2025-09/scaled-1680-/VhR0ETlvmTdjHI2Z-image.png)](https://kb.filewave.com/uploads/images/gallery/2025-09/VhR0ETlvmTdjHI2Z-image.png)
2. Search for Math Settings in the search bar &gt; Configure. Under <span class="s1">**Math Settings**</span>, enable <span class="s1">**System Behavior**</span> by checking the box.
    
    [![image.png](https://kb.filewave.com/uploads/images/gallery/2025-09/scaled-1680-/kVk5E0HsiR68XKsI-image.png)](https://kb.filewave.com/uploads/images/gallery/2025-09/kVk5E0HsiR68XKsI-image.png)
3. Leave the sub-options <span class="s1">**unchecked**</span>:
    
    
    - *Keyboard suggestions include math solutions*
    - *Math Notes is allowed in other apps such as Notes*
    
    ⚠️ Note: Checking *Math Notes is allowed* will <span class="s1">**enable**</span> sharing of math results across apps (e.g., in Freeform). Leaving it unchecked will restrict this.
4. Save and deploy the configuration to a test device, then a test group, followed by all target devices.

## Result

Once applied, Math Notes and related results will no longer be offered in other apps such as Freeform or Notes. Even though the device’s <span class="s2">**Settings &gt; Freeform &gt; Math Results**</span> menu may still display “Suggest Results,” no actual math solutions will appear.

This ensures students or end users can use core functionality of apps without unintended math assistance.

# Background Tasks (DDM status - macOS)

## What

FileWave has integrated Apple’s **Declarative Device Management (DDM)** capabilities to enhance the monitoring of background tasks on macOS devices. This new feature allows administrators to receive detailed reports on the background tasks that are present. The information provided includes the service identifier, the application path (e.g., <span class="s1">/Applications/1Password.app</span>), the status of the service (such as **enabled** or **not registered**), the type of service (application or login item), the user ID (UID) under which the service is running, and the code signature details.

By leveraging DDM, macOS devices can autonomously report this information without the need for constant server queries. This enhancement improves the visibility of background processes across your device fleet, aiding in compliance, security auditing, and troubleshooting efforts.

## When/Why

This feature is particularly useful when there is a need to:

- **Audit Background Tasks**: Keep track of all background tasks running on macOS devices to ensure they comply with organizational policies.
- **Enhance Security Monitoring**: Identify unauthorized or malicious background tasks that could pose security risks.
- **Troubleshoot Issues**: Diagnose problems related to application performance or system stability by analyzing running background tasks.
- **Compliance Verification**: Ensure that required tasks are running and that unnecessary ones are disabled, aligning with compliance standards.

#### **Why This Feature Matters**

Understanding which background tasks are running on your macOS devices is crucial for maintaining a secure and efficient computing environment. Background tasks can have significant impacts on device performance, battery life, and security. Unauthorized tasks might access sensitive data or provide an entry point for threats. By receiving detailed reports on these tasks, administrators can take proactive measures to manage and secure their device fleet effectively.

The integration of DDM enhances this process by allowing devices to report their status autonomously. This reduces the need for frequent server polling, decreases network traffic, and provides up-to-date information without delays.

## How

#### **Enabling Background Tasks Reporting**

To utilize this feature, ensure that your macOS devices are enrolled in FileWave and running macOS 12 Monterey or later, that DDM is supported on these versions and ensure the FileWave Client is at least v15.5.0.

#### **Accessing Background Tasks Data**

Background tasks based on a launch daemon are now reported in Inventory for macOS devices supporting DDM, once the FileWave Client is up to date on a supported version of macOS. The below image shows an example of this inventory data.

[![image.png](https://kb.filewave.com/uploads/images/gallery/2024-10/scaled-1680-/YTkOPO1Cwh7wKrod-image.png)](https://kb.filewave.com/uploads/images/gallery/2024-10/YTkOPO1Cwh7wKrod-image.png)

## Related Content

- [FileWave Version 15.5.0](https://kb.filewave.com/books/downloads/page/filewave-version-1550-unsupported "FileWave Version 15.5.0")