Enforce PKI Certificate Chain of Trust.xml

<?xml version="1.0" encoding="UTF-8"?>
<extensionAttribute>
	<displayName>Enforce PKI Certificate Chain of Trust</displayName>
	<displayInCategory>Security Reporting</displayInCategory>
	<dataType>string</dataType>
	<description>This attribute verifies the "Enforce PKI Certificate Chain of Trust" setting.  The value to be verified will need to be specified when creating this extension attribute.   Example: "false" verifies that the "Enforce PKI Certificate Chain of Trust" setting is disabled</description>
	<scriptContentsMac>#!/bin/sh
desiredValue="EditFromTemplate_Desired_Value_-_Example:_true"

result=""
tmpResult=`defaults read /Library/Preferences/com.apple.security DisableUserTrustSettings`
if [ "$tmpResult" == "1" ]; then
result="true"
else
if [ "$tmpResult" == "0" ]; then
	result="false"
else
	if [ "$tmpResult" == "" ]; then
		result="Domain or Key Not Found"
	else
		result="$tmpResult"
	fi
fi
fi
if [ "$result" == "$desiredValue" ]; then
echo "&lt;result&gt;Pass ($result)&lt;/result&gt;"
else
echo "&lt;result&gt;Fail ($result)&lt;/result&gt;"
fi
	</scriptContentsMac>
</extensionAttribute>