Lenovo 20074CU User Manual page 44

Use saved user ID and password
When EAP authentication is set to PEAP:
Validate server certificate
Roaming type
Tunnel authentication
When tunnel authentication is set to MS-CHAP-V2, you can configure the following
settings (enter the name specified for the Roaming type field).
Use Windows logon name and password
Use temporary user ID and password
Use saved user ID and password
34
ThinkVantage Access Connections 4.1: User's Guide
The user ID and password for the tunnel authentication are set in advance.
If using the Windows logon user name and password for wireless network
authentication is enabled, the available user ID and password will be used
for tunnel authentication at Windows logon, and the computer will log on to
the Windows domain server. To enable this setting, go to Option, and
select the check box for Use Windows logon user name and password
to authenticate the wireless network.
If the server certificate must be verified, select the Validate server
certificate check box, and specify the certificate of a reliable route
certificate issuer. If the server name belongs to a specific domain, specify
the domain name in the server name field.
If the server certificate does not have to be verified, leave the Validate
server certificate check box blank. The application will not check the
reliability of the server, and the connection will not be tightly secured.
In the Roaming type field, enter the name of the user account that has
been registered on the Radius Server. This name should be the one
specified in the user ID field of the Tunnel authentication setting.
The following protocols are supported for tunnel authentication:
v MS-CHAP-V2
v GTC (Generic Token Card)
The user ID and password that are used for Windows logon will be used for
tunnel authentication as well. This setting is valid for activating the Single
sign-on function, which authenticates EAP-PEAP by use of the user ID and
password for Windows logon. To enable this setting, go to Option, and
select the check box for Use Windows logon user name and password
to authenticate the wireless network. Tunnel authentication and logon to
the domain server will be processed simultaneously.
For Thinkpad computers that support logging on to Windows by use of a
fingerprint reader, the wireless network authentication will be processed
automatically.
If you select this setting, a message will be displayed when you deploy this
location profile, asking you to enter the user ID and password for tunnel
authentication. After you enter the necessary information, the authentication
will start. This option is used to connect to the wireless network manually.
The user ID and password for tunnel authentication are set in advance.
If the use of the Windows logon user name and password for wireless
network authentication is enabled, the available user ID and password will
be used for tunnel authentication at Windows logon, and the computer will