3.2.5.2.12 MS-Quarantine-SoH

This attribute carries the SoH from the endpoint and the SoHR from the RADIUS server (as specified in [TNC-IF-TNCCSPBSoH]) when the Extensible Authentication Protocol (EAP) is not used.

If EAP is not used, the RADIUS server MUST add the MS-Quarantine-SoH attribute to the Access-Accept message in order to transfer the SoHR. This attribute is constructed as described in section 2.2.1.19. The attribute-specific value is obtained by copying the message parameter of the SendRadiusAccessAccept abstract interface (section 3.2.4.1).