Share via

2.2.3.2.8 ServerValidationParameters

  • Article

This type is referenced within the EapTlsConnectionPropertiesV1 schema (section 6.8.1) and the MsPeapConnectionPropertiesV1 schema (section 6.9.1). This type is defined to be a string formatted according to the type definition in the corresponding XML schema in section 6.8 or 6.9. The ServerValidationParameters type defines the following elements:

DisableUserPromptForServerValidation: An optional Boolean which specifies method behavior in case the server's certificate does not chain to a trusted root. If TRUE, certificate errors will cause the connection to be refused. If FALSE, the user is prompted to manually accept or reject the certificate.

ServerNames: An optional string that specifies the list of servers to which the client can authenticate. This element also contains an optional attribute:

PerformServerValidation: A Boolean indicating whether server validation is performed.<34>

AcceptServerName: An optional Boolean that indicates whether the server name is validated against the name string specified in the ServerNames (ServerValidationParameters) element.<35>

TrustedRootCA: The thumbprint of a root certification authority that is trusted to issue server certificates, represented as the hexadecimal encoding of the certificate hash. Multiple such elements can be present.