Edit

Share via

ServerValidationParameters Complex Type (TLS)

The ServerValidationParameters complex type contains information about how to perform server validation.

<xs:complexType name="ServerValidationParameters">
    <xs:sequence>
        <xs:element name="DisableUserPromptForServerValidation"
            type="boolean"
            minOccurs="0"
         />
        <xs:element name="ServerNames"
            type="string"
            minOccurs="0"
         />
        <xs:element name="TrustedRootCA"
            type="hexBinary"
            minOccurs="0"
            maxOccurs="unbounded"
         />
    </xs:sequence>
</xs:complexType>

Child elements

Element Type Description
DisableUserPromptForServerValidation boolean Indicates whether the user should be asked for server validation.
If DisableUserPromptForServerValidation is TRUE, then EAP-TLS performs the server validation without user input; if the validation fails, EAP-TLS fails the authentication.
If DisableUserPromptForServerValidation is FALSE, the user is prompted for a validated server certificate or name, or root certificate authority (CA).
The DisableUserPromptForServerValidation element is optional.
ServerNames string Represents a list of servers the client trusts. Each server name is delimited by semicolons, and can be represented by regular expressions.
The ServerNames element is optional.
TrustedRootCA hexBinary Captures the thumb print of root certificate authorities (CAs) that are trusted by the client.
The thumb print is a hexadecimal string that contains the SHA-1 hash of the certificate
The TrustedRootCA element is optional.

Requirements

Role Minimum supported OS version
Client
 Windows Vista [desktop apps only]
Server
 Windows Server 2008 [desktop apps only]

See also

EAPHost and Legacy Schema

eaptlsconnectionpropertiesv1 Schema

eaptlsconnectionpropertiesv1 Schema Complex Types