Cisco Systems PI21AG, CB21AG manual 4-16, xselement name=anyServerName type=Empty xsannotation

Chapter 4 Performing Administrative Tasks

The EAP-FAST XML Schema

<xs:element name="anyServerName" type="Empty">

<xs:annotation>

<xs:documentation>the server name within the certificate will not be tested.</xs:documentation>

</xs:annotation>

</xs:element>

</xs:choice>

<xs:choice>

<xs:element name="validateChainWithSpecificCa">

<xs:complexType>

<xs:complexContent>

<xs:extension base="CertificateContainer"/>

</xs:complexContent>

</xs:complexType>

</xs:element>

<xs:element name="validateChainWithAnyCaFromOs" type="Empty">

<xs:annotation>

<xs:documentation>the certificate chain will be trusted if it ends in a CA cert from the global CA cert store.</xs:documentation>

</xs:annotation>

</xs:element>

</xs:choice>

<xs:element name="userValidatesUntrustedServerCertificate" type="xs:boolean">

<xs:annotation>

<xs:documentation>if the server certificate fails to validate then if this is true the end-user will be asked to validate the server. If they do so then appropriate trustedCaCerts will be remembered as well as the server name fields so it will be automatically trusted in the future.</xs:documentation>

</xs:annotation>

</xs:element>

</xs:sequence>

</xs:complexType>

<xs:complexType name="ValidateWithSpecificPacs">

<xs:choice minOccurs="0" maxOccurs="unbounded">

<xs:annotation>

<xs:documentation>This is optional because it allows the profile to indicate that we want the engine to validate the server PACs but that the PACs will be dynamically added by the end-user actions or via unauthenticated provisioning rather than being statically defined here in the profile.</xs:documentation>

</xs:annotation>

	Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide for Windows Vista
4-16	OL-16534-01