Справочник Пользователя для Apple iPod and iPod Touch
58
Appendix B
Configuration Profile Format
If EAPFASTUsePAC is true, then an existing PAC is used, if it is present. The only way to
get a PAC on the device currently is to allow PAC provisioning. So, you need to enable
EAPFASTProvisionPAC, and if desired, also EAPFASTProvisionPACAnonymously.
EAPFASTProvisionPACAnonymously has a security weakness: it doesn’t authenticate
the server using a certificate; it relies on the shared secret of the user’s password.
get a PAC on the device currently is to allow PAC provisioning. So, you need to enable
EAPFASTProvisionPAC, and if desired, also EAPFASTProvisionPACAnonymously.
EAPFASTProvisionPACAnonymously has a security weakness: it doesn’t authenticate
the server using a certificate; it relies on the shared secret of the user’s password.
Certificates
As with VPN configurations, it’s possible to associate a certificate identity configuration
with a Wi-Fi configuration. This is useful when defining credentials for a secure
enterprise network. To associate an identity, specify its payload UUID via the
“PayloadCertificateUUID” key.
with a Wi-Fi configuration. This is useful when defining credentials for a secure
enterprise network. To associate an identity, specify its payload UUID via the
“PayloadCertificateUUID” key.
Proxy settings
Proxy settings are in a separate dictionary at the top level.
Key
Value
PayloadCertificateUUID
String. UUID of the certificate payload to use for the identity
credential.
credential.
Key
Value
PropNetProxiesHTTPEnable
Integer. 1 = Proxy enabled.
PropNetProxiesHTTPProxy
String. Proxy server address.
PropNetProxiesHTTPPort
Integer. Proxy port number.
HTTPProxyUsername
String, optional. User name.
HTTPProxyPassword
String, optional. User’s password.
PropNetProxiesProxyAutoConfigEn
able
able
Integer. 1 = Auto proxy enabled.
PropNetProxiesProxyAutoConfigUR
LString
LString
String. URL that points to a PAC file where the configuration
information is stored.
information is stored.