Cisco 5505 - ASA Firewall Edition Bundle Administrator's Manual page 105

Appendix A Sample AnyConnect Profile and XML Schema
certificate must match at least one of the specified key to be
selected.</xs:documentation>
</xs:complexType>
<xs:complexType name="ExtendedKeyUsage">
choosing acceptable client certificates.</xs:documentation>
maxOccurs="10">
certificate must match all of the specified key(s) to be selected.</xs:documentation>
OL-12950-012
<xs:annotation>
<xs:documentation>One or more match key may be specified.
</xs:annotation>
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:enumeration value="Decipher_Only"/>
<xs:enumeration value="Encipher_Only"/>
<xs:enumeration value="CRL_Sign"/>
<xs:enumeration value="Key_Cert_Sign"/>
<xs:enumeration value="Key_Agreement"/>
<xs:enumeration value="Data_Encipherment"/>
<xs:enumeration value="Key_Encipherment"/>
<xs:enumeration value="Non_Repudiation"/>
<xs:enumeration value="Digital_Signature"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
</xs:sequence>
<xs:annotation>
<xs:documentation>Certificate Extended Key attributes that can be used for
</xs:annotation>
<xs:sequence>
<xs:element name="ExtendedMatchKey" nillable="false" minOccurs="0"
<xs:annotation>
<xs:documentation>Zero or more extended match key may be specified.
</xs:annotation>
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:whiteSpace value="collapse"/>
<xs:enumeration value="ServerAuth">
<xs:annotation>
<xs:documentation>1.3.6.1.5.5.7.3.1</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="ClientAuth">
<xs:annotation>
<xs:documentation>1.3.6.1.5.5.7.3.2</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="CodeSign">
<xs:annotation>
<xs:documentation>1.3.6.1.5.5.7.3.3</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="EmailProtect">
<xs:annotation>
<xs:documentation>1.3.6.1.5.5.7.3.4</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="IPSecEndSystem">
<xs:annotation>
<xs:documentation>1.3.6.1.5.5.7.3.5</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="IPSecTunnel">
<xs:annotation>
<xs:documentation>1.3.6.1.5.5.7.3.6</xs:documentation>
Sample AnyConnect Profile Schema
Cisco AnyConnect VPN Client Administrator Guide
A
A
A-7