// Copyright (c) 2007-2010, Intel Corporation. All rights reserved. 
   [Version ( "3.0.0" ), 
    Description ( 
       "The AMT_TLSSettingData class represents configuration-related "
       "and operational parameters for the TLS service in the Intel(R) "
       "AMT." )]
class AMT_TLSSettingData : CIM_SettingData {

      [Description ( 
          "Adminstrator-settable property that determines whether "
          "or not mutual authentication is used at the TLS layer is "
          "used on the associated service access point. If False, "
          "then only the server authenticates itself at the TLS "
          "layer." )]
   boolean MutualAuthentication;

      [Required, Description ( 
          "Administrator-settable property that determines whether "
          "or not TLS is used on the associated service access "
          "point." )]
   boolean Enabled;

      [Description ( 
          "An array of strings, used to validate the CN subfield of "
          "the subject field in X.509 certificates presented to "
          "Intel(R) AMT in the TLS handshake. This value must comply "
          "with the requirements of RFC 1035." )]
   string TrustedCN[];

      [Description ( 
          "The Issuer Name field in the X.509 certificate." )]
   string X509IssuerName;

      [Description ( 
          "The Serial Numebr field in the X.509 certificate." ), 
       OctetString]
   uint8 X509SerialNumber[20];

      [Description ( 
          "This setting defines once TLS is enabled and configured "
          "whether non-secure EOI/WSMAN connections are still "
          "accepted by FW on ports 16992 and 623. If "
          "AcceptNonSecureConnections is set to TRUE then "
          "non-secure connections are still accepted. If set to "
          "FALSE then non-secure connections are rejected. This "
          "setting may be set per interface for the local and "
          "network interfaces." )]
   boolean AcceptNonSecureConnections;

      [Description ( 
          "This setting define whether a non secure - aka direct tcp"
	  "is supported or not - not supported from RPL on."
	  "This setting is read only." )]
   boolean NonSecureConnectionsSupported;
};