A-5
Cisco AnyConnect VPN Client Administrator Guide
OL-12950-012
Appendix A Sample AnyConnect Profile and XML Schema
Sample AnyConnect Profile Schema
<xs:documentation>Does the administrator of
this profile allow the user to control this attribute for their own use. Any user setting
associated with this attribute will be stored elsewhere.</xs:documentation>
</xs:annotation>
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:enumeration value="true">
<xs:annotation>
<xs:documentation>user is allowed
to contro
l this setting.</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="false">
<xs:annotation>
<xs:documentation>user is not
allowed t
o control this setting.</xs:documentation>
</xs:annotation>
</xs:enumeration>
</xs:restriction>
</xs:simpleType>
</xs:attribute>
</xs:extension>
</xs:simpleContent>
</xs:complexType>
</xs:element>
<xs:element name="CertEnrollmentPin" default="pinAllowed"
minOccurs
="0">
<xs:annotation>
<xs:documentation>If user is importing a certificate using
the enrol
lment feature, this attribute will enforce any pin application
requirement.</xs:documentation>
</xs:annotation>
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:enumeration value="noPin">
<xs:annotation>
<xs:documentation>user may not enter a pin when
enrolling
a certificate.</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="pinAllowed">
<xs:annotation>
<xs:documentation>user may enter a pin when
enrolling
a certificate.</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="pinRequired">
<xs:annotation>
<xs:documentation>user must enter a pin when
enrolling
a certificate.</xs:documentation>
</xs:annotation>
</xs:enumeration>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="CertificateMatch" minOccurs="0">
<xs:annotation>
<xs:documentation>This section enables the definition of
various a
ttributes that can be used to refine client certificate
selection.</xs:documentation>
</xs:annotation>
<xs:complexType>
<xs:sequence>