Description: This object indicates the type of PAC this entry represents.

'unknown' - Any other type of PAC that is not covered below

'tunnel' - Distributed shared secret between the peer and ACS that is used to establish a secure tunnel and convey the policy of what must and can occur in the tunnel.

'machineAuthentication' - The Machine Authentication PAC contains information in the PAC opaque that identifies the machine. It is meant to be used by a machine when network access is required and no user is logged in.

'userAuthorization' - The User Authorization PAC contains information in the PAC opaque that identifies a user and provides authorization information. The User Authorization PAC is used to provide user information during stateless session resumption so user authentication MAY be skipped.

'posture' - Distributed posture checking and authorization result based on a previous posture validation. A posture PAC can be used to optimize posture validation in the case of frequent revalidations. This result is specific to the posture validation application and may be used outside the contents of EAP-FAST.

'ciscoTrustSec' - A credential dynamically provisioned in phase 0 of EAP-FAST. It is used by Trustsec to set up secure communications with the server.