<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet type="text/xsl" href="teap-parameters.xsl"?>
<?xml-model href="teap-parameters.rng" schematypens="http://relaxng.org/ns/structure/1.0" ?>
<registry xmlns="http://www.iana.org/assignments" id="teap-parameters">
  <title>Tunnel Extensible Authentication Protocol (TEAP) Parameters</title>
  <category>Extensible Authentication Protocol (EAP)</category>
  <created>2014-01-24</created>
  <updated>2026-03-05</updated>
  
  <registry id="teap-tlvs">
    <title>TEAP TLV Types</title>
    <xref type="rfc" data="rfc9930"/>
    <registration_rule>Specification Required</registration_rule>
    <expert>Margaret Cullen, Nancy Cam-Winget</expert>
    <record>
      <value>0</value>
      <description>Unassigned</description>
    </record>
    <record>
      <value>1</value>
      <description>Authority-ID TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>2</value>
      <description>Identity-Type TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>3</value>
      <description>Result TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>4</value>
      <description>NAK TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>5</value>
      <description>Error TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record> 
    <record>
      <value>6</value>
      <description>Channel-Binding TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record> 
    <record>
      <value>7</value>
      <description>Vendor-Specific TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>8</value>
      <description>Request-Action TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record> 
    <record>
      <value>9</value>
      <description>EAP-Payload TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>10</value>
      <description>Intermediate-Result TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record updated="2024-06-21">
      <value>11</value>
      <description>PAC TLV (DEPRECATED)</description>
      <xref type="rfc" data="rfc7170"/>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>12</value>
      <description>Crypto-Binding TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>13</value>
      <description>Basic-Password-Auth-Req TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>14</value>
      <description>Basic-Password-Auth-Resp TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>15</value>
      <description>PKCS#7 TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record> 
    <record>
      <value>16</value>
      <description>PKCS#10 TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record> 
    <record>
      <value>17</value>
      <description>Trusted-Server-Root TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record date="2024-06-21">
      <value>18</value>
      <description>CSR-Attributes TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record date="2024-06-21">
      <value>19</value>
      <description>Identity-Hint TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>20-16383</value>
      <description>Unassigned</description>
    </record>
  </registry>
  
  
  <registry id="identity-type">
    <title>TEAP Identity-Type TLV (value 2) Registry</title>
    <xref type="rfc" data="rfc9930"/>
    <registration_rule>Specification Required</registration_rule>
    <expert>Unassigned</expert>
    <record>
      <value>0</value>
      <description>Unassigned</description>
    </record>
    <record>
      <value>1</value>
      <description>User</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>2</value>
      <description>Machine</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>3-65535</value>
      <description>Unassigned</description>
    </record>
  </registry>
  
  
  <registry id="status-codes">
    <title>TEAP Status Codes</title>
    <xref type="rfc" data="rfc9930"/>
    <registration_rule>Specification Required</registration_rule>
    <expert>Unassigned</expert>
    <record>
      <value>0</value>
      <description>Unassigned</description>
    </record>
    <record>
      <value>1</value>
      <description>Success</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>2</value>
      <description>Failure</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>3-255</value>
      <description>Unassigned</description>
    </record>
  </registry>
  
  
  <registry id="error">
    <title>TEAP Error TLV (value 5) Error Codes</title>
    <xref type="rfc" data="rfc9930"/>
    <registration_rule>Specification Required</registration_rule>
    <expert>Margaret Cullen, Nancy Cam-Winget</expert>
    <record>
      <value>0</value>
      <description>Unassigned</description>
    </record>
    <record>
      <value>1</value>
      <description>User account expires soon</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>2</value>
      <description>User account credential expires soon</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>3</value>
      <description>User account authorizations change soon</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>4</value>
      <description>Clock skew detected</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>5</value>
      <description>Contact administrator</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>6</value>
      <description>User account credentials change required</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>7-1000</value>
      <description>Unassigned</description>
    </record>
    <record>
      <value>1001</value>
      <description>Inner Method Error</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1002</value>
      <description>Unspecified authentication infrastructure problem</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1003</value>
      <description>Unspecified authentication failure</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1004</value>
      <description>Unspecified authorization failure</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1005</value>
      <description>User account credentials unavailable</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1006</value>
      <description>User account expired</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1007</value>
      <description>User account locked: try again later</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1008</value>
      <description>User account locked: admin intervention required</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1009</value>
      <description>Authentication infrastructure unavailable</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1010</value>
      <description>Authentication infrastructure not trusted</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1011</value>
      <description>Clock skew too great</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1012</value>
      <description>Invalid inner realm</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1013</value>
      <description>Token out of sync: administrator intervention required</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1014</value>
      <description>Token out of sync: PIN change required</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1015</value>
      <description>Token revoked</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1016</value>
      <description>Tokens exhausted</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1017</value>
      <description>Challenge expired</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1018</value>
      <description>Challenge algorithm mismatch</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1019</value>
      <description>Client certificate not supplied</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1020</value>
      <description>Client certificate rejected</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1021</value>
      <description>Realm mismatch between inner and outer identity</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1022</value>
      <description>Unsupported Algorithm In Certificate Signing Request</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1023</value>
      <description>Unsupported Extension In Certificate Signing Request</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1024</value>
      <description>Bad Identity in Certificate Signing Request</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1025</value>
      <description>Bad Certificate Signing Request</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1026</value>
      <description>Internal CA Error</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1027</value>
      <description>General PKI Error</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1028</value>
      <description>Inner method's channel-binding data required but not supplied</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1029</value>
      <description>Inner method's channel-binding data did not include required information</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1030</value>
      <description>Inner method's channel binding data failed</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1031</value>
      <description>User account credentials incorrect [USAGE NOT RECOMMENDED]</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record date="2024-06-21">
      <value>1032</value>
      <description>Inner method not supported</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>1033-2000</value>
      <description>Unassigned</description>
    </record>
    <record>
      <value>2001</value>
      <description>Tunnel Compromise Error</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>2002</value>
      <description>Unexpected TLVs Exchanged</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record date="2026-02-19">
      <value>2003</value>
      <description>The Crypto-Binding TLV is invalid (Version, or Received-Ver, or Sub-Type)</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record date="2026-02-19">
      <value>2004</value>
      <description>The first Inner Method did not derive EMSK</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record date="2026-02-19">
      <value>2005</value>
      <description>The Crypto-Binding TLV did not include a required MSK Compound MAC</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record date="2026-02-19">
      <value>2006</value>
      <description>The MSK Compound MAC fails verification</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record date="2026-02-19">
      <value>2007</value>
      <description>The Crypto-Binding TLV did not include a required EMSK Compound MAC</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record date="2026-02-19">
      <value>2008</value>
      <description>The EMSK Compound MAC fails verification</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record date="2026-02-19">
      <value>2009</value>
      <description>The EMSK Compound MAC exists, but the Inner Method did not derive EMSK</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>2010-4294967295</value>
      <description>Unassigned</description>
    </record>
  </registry>
  
  
  <registry id="request-action">
    <title>TEAP Request-Action TLV (value 8) Registry</title>
    <xref type="rfc" data="rfc9930"/>
    <registration_rule>Specification Required</registration_rule>
    <expert>Unassigned</expert>
    <record>
      <value>0</value>
      <description>Unassigned</description>
    </record>
    <record>
      <value>1</value>
      <description>Process-TLV</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>2</value>
      <description>Negotiate-EAP</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>3-255</value>
      <description>Unassigned</description>
    </record>
  </registry>
  
  
  <registry id="pac-attribute-type-code">
    <title>TEAP PAC TLV (value 11) PAC Attribute Type Codes</title>
    <xref type="rfc" data="rfc9930"/>
    <registration_rule>Registry closed</registration_rule>
    <note>This registry has been closed. See <xref type="rfc" data="rfc9930"/>.
    </note>
    <record>
      <value>0</value>
      <description>Unassigned</description>
    </record>
    <record>
      <value>1</value>
      <description>PAC-Key</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>2</value>
      <description>PAC-Opaque</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>3</value>
      <description>PAC-Lifetime</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>4</value>
      <description>A-ID</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>5</value>
      <description>I-ID</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>6</value>
      <description>Reserved</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>7</value>
      <description>A-ID-Info</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>8</value>
      <description>PAC-Acknowledgement</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>9</value>
      <description>PAC-Info</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>10</value>
      <description>PAC-Type</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>11-65535</value>
      <description>Unassigned</description>
    </record>
  </registry>
  
  <registry id="pac-type-code">
    <title>TEAP PAC TLV (value 11) PAC-Type Type Codes</title>
    <xref type="rfc" data="rfc9930"/>
    <registration_rule>Registry closed</registration_rule>
    <note>This registry has been closed. See <xref type="rfc" data="rfc9930"/>.
    </note>
    <record>
      <value>0</value>
      <description>Unassigned</description>
    </record>
    <record>
      <value>1</value>
      <description>Tunnel PAC</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>2-65535</value>
      <description>Unassigned</description>
    </record> 
  </registry>
 
  <registry id="trusted-server-root">
    <title>TEAP Trusted-Server-Root TLV (value 17) Credential-Format Codes</title>
    <xref type="rfc" data="rfc9930"/>
    <registration_rule>Specification Required</registration_rule>
    <expert>Unassigned</expert>
    <record>
      <value>0</value>
      <description>Unassigned</description>
    </record>
    <record>
      <value>1</value>
      <description>PKCS#7-Server-Certificate-Root</description>
      <xref type="rfc" data="rfc9930"/>
    </record>
    <record>
      <value>2-65535</value>
      <description>Unassigned</description>
    </record>  
  </registry> 
  
  <people/>
</registry>
