json_schema: {
      "properties": {
          "PayloadDescription": {
              "default": "SmartCard Settings",
              "description": "Description of the payload",
              "type": "string"
          },
          "PayloadDisplayName": {
              "default": "SmartCard Settings",
              "description": "Name of the payload",
              "type": "string"
          },
          "PayloadIdentifier": {
              "default": "com.apple.smartcard",
              "description": "A unique identifier for the payload, dot-delimited.  Usually root PayloadIdentifier+subidentifier",
              "type": "string"
          },
          "PayloadOrganization": {
              "description": "This value describes the issuing organization of the profile, as displayed to the user",
              "type": "string"
          },
          "PayloadType": {
              "default": "com.apple.smartcard",
              "description": "The type of the payload, a reverse dns string",
              "type": "string"
          },
          "PayloadUUID": {
              "default": "",
              "description": "Unique identifier for the payload (format 01234567-89AB-CDEF-0123-456789ABCDEF)",
              "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
              "type": "string"
          },
          "PayloadVersion": {
              "default": 1,
              "description": "The version of the whole configuration profile.",
              "type": "number"
          },
          "UserPairing": {
              "default": true,
              "description": "Optional. If false, users will not get the pairing dialog, although existing pairings will still work. Default is true.",
              "type": "boolean"
          },
          "allowSmartCard": {
              "default": true,
              "description": "Optional. If false, the SmartCard is disabled for logins, authorizations, and screensaver unlocking. It is still allowed for other functions, such as signing emails and web access. A restart is required for a change of setting to take effect. Default is true.",
              "type": "boolean"
          },
          "checkCertificateTrust": {
              "default": false,
              "description": "Optional. If true, certificates on the card must be valid in these ways: its issuer is system-trusted, the certificate is not expired, its \"valid-after\" date is in the past,\n                    and it passes CRL and OCSP checking. User overrides are not allowed. Usually this key is set to true for SmartCard use in corporate environments. Default is false.",
              "type": "boolean"
          },
          "oneCardPerUser": {
              "default": false,
              "description": "Optional. If true, a user can pair with only one smart card, although existing pairings will be allowed if already set up. Default is false.",
              "type": "boolean"
          }
      },
      "title": "com.apple.smartcard",
      "type": "object"
  }