This is what Cisco book says about PAC phases:.....Phase 0: The PAC is generated or provisioned and installed on the client Phase 1: After they authenticate each other, they will negotiate a TLS tunnel....What will be installed on the client in phase...