---
title: NetworkVPNIKEV2AuthenticationObject
framework: Device Management
role: symbol
role_heading: Object
platforms: [iOS 27.0+, iPadOS 27.0+, Mac Catalyst 27.0+, macOS 27.0+, tvOS 27.0+, visionOS 27.0+]
path: devicemanagement/networkvpnikev2authenticationobject
---

# NetworkVPNIKEV2AuthenticationObject

Settings that control authentication.

## Declaration

```data
object NetworkVPNIKEV2AuthenticationObject
```

## Properties

CredentialsAssetReference: The identifier of an asset declaration that contains the credentials (password) to authenticate with the VPN server. Required when Authentication.Method is set to SharedSecret. ExtendedAuth: Specifies details about extended authentication (EAP). IdentityAssetReference: The identifier of a credential asset declaration that contains the identity that this account requires to authenticate with the VPN server. If the value of AuthenticationMethod is Certificate, the system sends this certificate out for IKEv2 machine authentication. If extended authentication (EAP) is used, the system sends this certificate out for EAP-TLS authentication. Required when Authentication.Method is set to Certificate. IdentityCertificateType: The type of key used by the identity set in the IdentityAssetReference to use for IKEv2 machine authentication. If this key is included, the system requires a value for ServerCertificateIssuerCommonName. Method: The type of authentication method for the VPN. To enable EAP-only authentication, set this to None and ExtendedAuthEnabled to true. If this is None and the ExtendedAuthEnabled key isn’t set, the authentication configuration defaults to SharedSecret.

## Topics

### Objects

- [NetworkVPNIKEV2Authentication_ExtendedAuthObject](devicemanagement/networkvpnikev2authentication_extendedauthobject.md)

## See Also

### Objects

- [NetworkVPNIKEV2DNSObject](devicemanagement/networkvpnikev2dnsobject.md)
- [NetworkVPNIKEV2IdleObject](devicemanagement/networkvpnikev2idleobject.md)
- [NetworkVPNIKEV2NetworkRoutingObject](devicemanagement/networkvpnikev2networkroutingobject.md)
- [NetworkVPNIKEV2OnDemandObject](devicemanagement/networkvpnikev2ondemandobject.md)
- [NetworkVPNIKEV2PostQuantumKeyExchangeObject](devicemanagement/networkvpnikev2postquantumkeyexchangeobject.md)
- [NetworkVPNIKEV2ProxiesObject](devicemanagement/networkvpnikev2proxiesobject.md)
- [NetworkVPNIKEV2SecurityAssociationParametersObject](devicemanagement/networkvpnikev2securityassociationparametersobject.md)