Tunnel Extensible Authentication Protocol (TEAP) Parameters

Created

  • 2014-01-24

Last Updated

  • 2026-03-05

Available Formats

TEAP TLV Types

Registration Procedure(s)

  • Specification Required

Expert(s)

  • Margaret Cullen, Nancy Cam-Winget

Reference

  • RFC 9930: Tunnel Extensible Authentication Protocol (TEAP) Version 1

Available Formats

Value Description Reference
0 Unassigned
1 Authority-ID TLV RFC 9930
2 Identity-Type TLV RFC 9930
3 Result TLV RFC 9930
4 NAK TLV RFC 9930
5 Error TLV RFC 9930
6 Channel-Binding TLV RFC 9930
7 Vendor-Specific TLV RFC 9930
8 Request-Action TLV RFC 9930
9 EAP-Payload TLV RFC 9930
10 Intermediate-Result TLV RFC 9930
11 PAC TLV (DEPRECATED) RFC 7170; RFC 9930
12 Crypto-Binding TLV RFC 9930
13 Basic-Password-Auth-Req TLV RFC 9930
14 Basic-Password-Auth-Resp TLV RFC 9930
15 PKCS#7 TLV RFC 9930
16 PKCS#10 TLV RFC 9930
17 Trusted-Server-Root TLV RFC 9930
18 CSR-Attributes TLV RFC 9930
19 Identity-Hint TLV RFC 9930
20-16383 Unassigned

TEAP Identity-Type TLV (value 2) Registry

Registration Procedure(s)

  • Specification Required

Expert(s)

  • Unassigned

Reference

  • RFC 9930: Tunnel Extensible Authentication Protocol (TEAP) Version 1

Available Formats

Value Description Reference
0 Unassigned
1 User RFC 9930
2 Machine RFC 9930
3-65535 Unassigned

TEAP Status Codes

Registration Procedure(s)

  • Specification Required

Expert(s)

  • Unassigned

Reference

  • RFC 9930: Tunnel Extensible Authentication Protocol (TEAP) Version 1

Available Formats

Value Description Reference
0 Unassigned
1 Success RFC 9930
2 Failure RFC 9930
3-255 Unassigned

TEAP Error TLV (value 5) Error Codes

Registration Procedure(s)

  • Specification Required

Expert(s)

  • Margaret Cullen, Nancy Cam-Winget

Reference

  • RFC 9930: Tunnel Extensible Authentication Protocol (TEAP) Version 1

Available Formats

Value Description Reference
0 Unassigned
1 User account expires soon RFC 9930
2 User account credential expires soon RFC 9930
3 User account authorizations change soon RFC 9930
4 Clock skew detected RFC 9930
5 Contact administrator RFC 9930
6 User account credentials change required RFC 9930
7-1000 Unassigned
1001 Inner Method Error RFC 9930
1002 Unspecified authentication infrastructure problem RFC 9930
1003 Unspecified authentication failure RFC 9930
1004 Unspecified authorization failure RFC 9930
1005 User account credentials unavailable RFC 9930
1006 User account expired RFC 9930
1007 User account locked: try again later RFC 9930
1008 User account locked: admin intervention required RFC 9930
1009 Authentication infrastructure unavailable RFC 9930
1010 Authentication infrastructure not trusted RFC 9930
1011 Clock skew too great RFC 9930
1012 Invalid inner realm RFC 9930
1013 Token out of sync: administrator intervention required RFC 9930
1014 Token out of sync: PIN change required RFC 9930
1015 Token revoked RFC 9930
1016 Tokens exhausted RFC 9930
1017 Challenge expired RFC 9930
1018 Challenge algorithm mismatch RFC 9930
1019 Client certificate not supplied RFC 9930
1020 Client certificate rejected RFC 9930
1021 Realm mismatch between inner and outer identity RFC 9930
1022 Unsupported Algorithm In Certificate Signing Request RFC 9930
1023 Unsupported Extension In Certificate Signing Request RFC 9930
1024 Bad Identity in Certificate Signing Request RFC 9930
1025 Bad Certificate Signing Request RFC 9930
1026 Internal CA Error RFC 9930
1027 General PKI Error RFC 9930
1028 Inner method's channel-binding data required but not supplied RFC 9930
1029 Inner method's channel-binding data did not include required information RFC 9930
1030 Inner method's channel binding data failed RFC 9930
1031 User account credentials incorrect [USAGE NOT RECOMMENDED] RFC 9930
1032 Inner method not supported RFC 9930
1033-2000 Unassigned
2001 Tunnel Compromise Error RFC 9930
2002 Unexpected TLVs Exchanged RFC 9930
2003 The Crypto-Binding TLV is invalid (Version, or Received-Ver, or Sub-Type) RFC 9930
2004 The first Inner Method did not derive EMSK RFC 9930
2005 The Crypto-Binding TLV did not include a required MSK Compound MAC RFC 9930
2006 The MSK Compound MAC fails verification RFC 9930
2007 The Crypto-Binding TLV did not include a required EMSK Compound MAC RFC 9930
2008 The EMSK Compound MAC fails verification RFC 9930
2009 The EMSK Compound MAC exists, but the Inner Method did not derive EMSK RFC 9930
2010-4294967295 Unassigned

TEAP Request-Action TLV (value 8) Registry

Registration Procedure(s)

  • Specification Required

Expert(s)

  • Unassigned

Reference

  • RFC 9930: Tunnel Extensible Authentication Protocol (TEAP) Version 1

Available Formats

Value Description Reference
0 Unassigned
1 Process-TLV RFC 9930
2 Negotiate-EAP RFC 9930
3-255 Unassigned

TEAP PAC TLV (value 11) PAC Attribute Type Codes

Registration Procedure(s)

  • Registry closed

Reference

  • RFC 9930: Tunnel Extensible Authentication Protocol (TEAP) Version 1

Note

This registry has been closed. See RFC 9930.

Available Formats

Value Description Reference
0 Unassigned
1 PAC-Key RFC 9930
2 PAC-Opaque RFC 9930
3 PAC-Lifetime RFC 9930
4 A-ID RFC 9930
5 I-ID RFC 9930
6 Reserved RFC 9930
7 A-ID-Info RFC 9930
8 PAC-Acknowledgement RFC 9930
9 PAC-Info RFC 9930
10 PAC-Type RFC 9930
11-65535 Unassigned

TEAP PAC TLV (value 11) PAC-Type Type Codes

Registration Procedure(s)

  • Registry closed

Reference

  • RFC 9930: Tunnel Extensible Authentication Protocol (TEAP) Version 1

Note

This registry has been closed. See RFC 9930.

Available Formats

Value Decription Reference
0 Unassigned
1 Tunnel PAC RFC 9930
2-65535 Unassigned

TEAP Trusted-Server-Root TLV (value 17) Credential-Format Codes

Registration Procedure(s)

  • Specification Required

Expert(s)

  • Unassigned

Reference

  • RFC 9930: Tunnel Extensible Authentication Protocol (TEAP) Version 1

Available Formats

Value Description Reference
0 Unassigned
1 PKCS#7-Server-Certificate-Root RFC 9930
2-65535 Unassigned