58 Appendix B Configuration Profile Format
If EAPFASTUsePAC is true, then an existing PAC is used, if it is present. The only way to
get a PAC on the device currently is to allow PAC provisioning. So, you need to enable
EAPFASTProvisionPAC, and if desired, also EAPFASTProvisionPACAnonymously.
EAPFASTProvisionPACAnonymously has a security weakness: it doesn’t authenticate
the server using a certificate; it relies on the shared secret of the user’s password.
Certificates
As with VPN configurations, it’s possible to associate a certificate identity configuration
with a Wi-Fi configuration. This is useful when defining credentials for a secure
enterprise network. To associate an identity, specify its payload UUID via the
“PayloadCertificateUUID” key.
Proxy settings
Proxy settings are in a separate dictionary at the top level.
Key Value
PayloadCertificateUUID String. UUID of the certificate payload to use for the identity
credential.
Key Value
PropNetProxiesHTTPEnable Integer. 1 = Proxy enabled.
PropNetProxiesHTTPProxy String. Proxy server address.
PropNetProxiesHTTPPort Integer. Proxy port number.
HTTPProxyUsername String, optional. User name.
HTTPProxyPassword String, optional. User’s password.
PropNetProxiesProxyAutoConfigEn
able
Integer. 1 = Auto proxy enabled.
PropNetProxiesProxyAutoConfigUR
LString
String. URL that points to a PAC file where the configuration
information is stored.